General

  • Target
    b9220e18f15660f7649d01f17b9b787982442067449c0f27fce621f365b91edd.zip
  • Size 239KB
  • Sample240402-qgpasabc43
  • SHA256 255e0ea8c1428dbe612a52e7674497fb4ec5803d6a896abcaf7d96575b7eef93
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • vidar

Version
  • 8.6

Botnet
  • debff3f4f38e9beeaf8e215a762c8549

C2
  • https://steamcommunity.com/profiles/76561199658817715

  • https://t.me/sa9ok

Attributes
  • profile_id_v2

    debff3f4f38e9beeaf8e215a762c8549

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

Targets

    • Target
      b9220e18f15660f7649d01f17b9b787982442067449c0f27fce621f365b91edd.exe
    • Size 278KB
    • SHA256 b9220e18f15660f7649d01f17b9b787982442067449c0f27fce621f365b91edd
    • MD5 SHA1 SHA512 SSDEEP
    • Detect Vidar Stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks