Overview

overview

10

Static

static

3

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    397KB

  • Sample

    240426-kzfhpsdb56

  • MD5

    4b46a0105ccb6a18f9872c93f12d06fc

  • SHA1

    0431e68c03ca35eae0dac613e7e8b9628aa0dc3a

  • SHA256

    85d635c9d2462f7f97a7d91bb8e0e72eeebf5f394580f6a97a016f2f42f9c29a

  • SHA512

    9ce3ebd4fd9b6a454ea7bf3dba6742a237547cc210b93e792cfb53b632986e1d9850bb072818821b513456079ad2c9bd7c5e491f4f02dc52109b65241463dca7

  • SSDEEP

    6144:FBQ4J4ZgQBW643RESjJMLGDzlkGqXu1Kw8lv/qIQEfEXTPSrmNidzsyXRa:c4J4ZH65jJMLixILXR82kizPXRa

Score
10/10
vidarstealer

Malware Config

Extracted

Family

vidar

C2

https://steamcommunity.com/profiles/76561199677575543

https://t.me/snsb82
Attributes
  • user_agent

    Mozilla/5.0 (Windows NT 10.0; rv:109.0) Gecko/20100101 Firefox/115.0

Targets

    • Target

      file.exe

    • Size

      397KB

    • MD5

      4b46a0105ccb6a18f9872c93f12d06fc

    • SHA1

      0431e68c03ca35eae0dac613e7e8b9628aa0dc3a

    • SHA256

      85d635c9d2462f7f97a7d91bb8e0e72eeebf5f394580f6a97a016f2f42f9c29a

    • SHA512

      9ce3ebd4fd9b6a454ea7bf3dba6742a237547cc210b93e792cfb53b632986e1d9850bb072818821b513456079ad2c9bd7c5e491f4f02dc52109b65241463dca7

    • SSDEEP

      6144:FBQ4J4ZgQBW643RESjJMLGDzlkGqXu1Kw8lv/qIQEfEXTPSrmNidzsyXRa:c4J4ZH65jJMLixILXR82kizPXRa

    Score
    10/10
    vidarstealer

    • Detect Vidar Stealer

      stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks