Overview

overview

10

Static

static

1

58c48e2b1d...ff.exe

windows7-x64

3

58c48e2b1d...ff.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c4193cd5a72e0ac786e4bd3bf4ee44ff4af3eca8f5fea05cf4fc1d27e0934681

  • Size

    223KB

  • Sample

    240417-p77pdahg5v

  • MD5

    8563f8bb72fa2db0771aa7781bb708d9

  • SHA1

    d2b49879d8e4a284e8e068f2510e13060c1d25ae

  • SHA256

    c4193cd5a72e0ac786e4bd3bf4ee44ff4af3eca8f5fea05cf4fc1d27e0934681

  • SHA512

    ea0b07f3d41aea2d7ee0cb1328381363ed548626eae1be7c7bd2363e0039aa0fd84149724e11832a67ea635dae283ddb7c76acc749ddf6343b5f2b1ad388edff

  • SSDEEP

    6144:77lvmtP9xkXVRpkmT0L7Rl/GSt2TYJMgoflWlUVjLV:fwtlyTl0Lll/GS8YJMjflW+V3V

Score
10/10
vidarstealer

Malware Config

Extracted

Family

vidar

C2

https://steamcommunity.com/profiles/76561199658817715

https://t.me/sa9ok
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

Targets

    • Target

      58c48e2b1d3d26ac96cebf8c114750582d4cdeef46a05bbf706c4b4630c541ff.exe

    • Size

      234KB

    • MD5

      d0492d61a010c75b69a21b31761ac655

    • SHA1

      0168759aebd253fed1dd89a44d260f6eadc94a2d

    • SHA256

      58c48e2b1d3d26ac96cebf8c114750582d4cdeef46a05bbf706c4b4630c541ff

    • SHA512

      e4552a5bcf7f6b7911a87873d6d168d44f4ab0f351c822b5ec3b14b5db359ce0fadecac7bc032111197243b79047cbe1203e4fa9afc558c9f9e2a0ecb28eb52d

    • SSDEEP

      6144:AhAZ0mc86LHVUCAlfzHORKOrfIrIEgcNxHookuvxNimwE5R:ImcJLHVpAl7o3rfwrYt+7/r

    Score
    10/10
    vidarstealer

    • Detect Vidar Stealer

      stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks