General

  • Target
    24ed7b0acd16f26f55d0d61ca59131b4e44fea3f94215a334b054e0e0baf22dd
  • Size 188KB
  • Sample240417-qqbfaaba4v
  • SHA256 24ed7b0acd16f26f55d0d61ca59131b4e44fea3f94215a334b054e0e0baf22dd
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • vidar

Version
  • 7.9

Botnet
  • 7f6c51bbce50f99b5a632c204a5ec558

C2
  • https://t.me/hypergog

  • https://steamcommunity.com/profiles/76561199642171824

Attributes
  • profile_id_v2

    7f6c51bbce50f99b5a632c204a5ec558

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36

Targets

    • Target
      a0a3d0722cdd4e15ec2a62a33cd5288e70118bd52100060e0874aa8811b5fc22.exe
    • Size 281KB
    • SHA256 a0a3d0722cdd4e15ec2a62a33cd5288e70118bd52100060e0874aa8811b5fc22
    • MD5 SHA1 SHA512 SSDEEP
    • Detect Vidar Stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks