Overview

overview

10

Static

static

3

c199cf21b7...9c.exe

windows7-x64

10

c199cf21b7...9c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    60159d9309f2c600d7e8823658bcdf157301ddeef432d1284c7c326ce8460ed1
  • Size 228KB
  • Sample240417-rjsxesbd27
  • SHA256 60159d9309f2c600d7e8823658bcdf157301ddeef432d1284c7c326ce8460ed1
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
vidar9f60b437431808d7b2a09351a7ddb41bstealer

Malware Config

Extracted

Family

  • vidar

Version

  • 8

Botnet

  • 9f60b437431808d7b2a09351a7ddb41b

C2

  • https://steamcommunity.com/profiles/76561199644883218

  • https://t.me/neoschats

Attributes
  • profile_id_v2

    9f60b437431808d7b2a09351a7ddb41b

  • user_agent

    Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78

Targets

    • Target
      c199cf21b7222adf5758e64f97b828f9ab19b5b1d8b8339e90670807213ed79c.exe
    • Size 243KB
    • SHA256 c199cf21b7222adf5758e64f97b828f9ab19b5b1d8b8339e90670807213ed79c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    vidar9f60b437431808d7b2a09351a7ddb41bstealer

    • Detect Vidar Stealer

      stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks