Overview

overview

10

Static

static

3

6534a5fc69...68.exe

windows7-x64

10

6534a5fc69...68.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    6534a5fc69df17cb5f4e130938348f68.bin
  • Size 453KB
  • Sample240609-ctc7dscg76
  • SHA256 6f8d63bcaff565b7d96e066b155a744c103dfa021cfd72076dd96ba82a335fea
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
vidar1375stealer

Malware Config

Extracted

Family

  • vidar

Version

  • 55.7

Botnet

  • 1375

C2

  • https://t.me/deadftx

  • https://www.tiktok.com/@user6068972597711

  • http://116.202.2.1:80

Attributes
  • profile_id

    1375

Targets

    • Target
      6534a5fc69df17cb5f4e130938348f68.bin
    • Size 453KB
    • SHA256 6f8d63bcaff565b7d96e066b155a744c103dfa021cfd72076dd96ba82a335fea
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    vidar1375stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks