General

  • Target
    SetupMin.exe
  • Size 453KB
  • Sample240607-1n6hraeb94
  • SHA256 6f8d63bcaff565b7d96e066b155a744c103dfa021cfd72076dd96ba82a335fea
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • vidar

Version
  • 55.7

Botnet
  • 1375

C2
  • https://t.me/deadftx

  • https://www.tiktok.com/@user6068972597711

  • http://116.202.2.1:80

Attributes
  • profile_id

    1375

Targets

    • Target
      SetupMin.exe
    • Size 453KB
    • SHA256 6f8d63bcaff565b7d96e066b155a744c103dfa021cfd72076dd96ba82a335fea
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks