Overview

overview

10

Static

static

3

998c38a881...ac.exe

windows7-x64

10

998c38a881...ac.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c144f16a3e3aff33fc958fdea42df7e0.bin

  • Size

    223KB

  • Sample

    240425-cjzbwade9t

  • MD5

    c81b2db1911b6257f467c76fbfaf36c2

  • SHA1

    ede0557e3852055ae6225e5526306b3ecde18143

  • SHA256

    6e9365885268d6b118ab33a54a515e74f8f5b027089cf3d3d3a967a9bb47eb85

  • SHA512

    f66e6e6e2d7f5b3a07dcb883c02b44248a134b6004a188b87b28f258f34e8fbf180ed6fd14fc5f80cf34a6e8182a4d4dc82ad4bf2b18ca144bd2ffd219f79f83

  • SSDEEP

    6144:jg2iw/v3HN9qHsoHJmbooNuZOUbaj0TerNi:jgF6v3t9qeso2OWUgerNi

Score
10/10
vidarstealer

Malware Config

Extracted

Family

vidar

C2

https://steamcommunity.com/profiles/76561199677575543

https://t.me/snsb82
Attributes
  • user_agent

    Mozilla/5.0 (Windows NT 10.0; rv:109.0) Gecko/20100101 Firefox/115.0

Targets

    • Target

      998c38a88197ab545ed66959130ba09db2359000da1fe5b6af913a33d5902cac.exe

    • Size

      350KB

    • MD5

      c144f16a3e3aff33fc958fdea42df7e0

    • SHA1

      470f6863ce73dbfd88441dc2c06e55d6ab3a96f6

    • SHA256

      998c38a88197ab545ed66959130ba09db2359000da1fe5b6af913a33d5902cac

    • SHA512

      6193661166530b6e923c1de242112c3e90d7562fce979d7d4933f49b61954a407badba5ddc0833ff00907b64b78e2a84630a3be8ba7ff18147d875f3f2b54e2a

    • SSDEEP

      3072:y8RfADp0Sf7qbe+sXJZXAksI2opQJy1Im2VlzlVHu2rC86PlFEVSmkfQIkp7Kgtv:MDqy/PLIoqJyrY3c2G8yXmpIyKE1c

    Score
    10/10
    vidarstealer

    • Detect Vidar Stealer

      stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks