General

  • Target

    f714adc256ed7b0d48a50c9b10d0db1d6285541801e720569c86fceeba072697.zip

  • Size

    226KB

  • Sample

    240402-qgqtlsba3t

  • MD5

    200dd0d226fa7861fae3721120bf4027

  • SHA1

    df67f05c1e0a4ef888e0c6110a9f146ff121756a

  • SHA256

    7f5670d2cb9cd0347572c2a04dc7ede33387fcc596a4e5bb16d834e5e543bf27

  • SHA512

    e41b0ce9647127d13aa44fa1813baa0d5245adafeb2b39fbf857a0dcffa237f07d4ed8ca9d84a9e5e44315d16fe0a350c8d2b74f04501551d4f0092e99159d9e

  • SSDEEP

    3072:X9BcE0lHIipXiRHXSscFDzJrdXgm06Ag6RPyA+nrjk3SegEesxJNc0TChr:NBIIipyR3SschJrZgm6jTugieRvHmr

Score
10/10

Malware Config

Extracted

Family

vidar

C2

https://steamcommunity.com/profiles/76561199658817715

https://t.me/sa9ok

Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

Targets

    • Target

      f714adc256ed7b0d48a50c9b10d0db1d6285541801e720569c86fceeba072697.exe

    • Size

      238KB

    • MD5

      0ce3dc374e49433d7e15d02c015e0ee3

    • SHA1

      71882bb02d1fa7b4a0f824afdcc1cd53bdb85ba1

    • SHA256

      f714adc256ed7b0d48a50c9b10d0db1d6285541801e720569c86fceeba072697

    • SHA512

      a68b25bd8170205d491f3409393757eda6ec4c2b7f31e985b57a8d5fe9e876264167d2228087c6645ebd6dee6522386f9e39e631e6a7f06783f401432df730fa

    • SSDEEP

      6144:hABBPmUqO791Ou5dscGTGnbpZfcATrKTJJzM5E:hABBOa90uzVWGlRmTJX

    Score
    10/10
    • Detect Vidar Stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks