Overview

overview

10

Static

static

1

snVG2I5B.html

windows7-x64

10

snVG2I5B.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    snVG2I5B

  • Size

    2KB

  • Sample

    240627-wpxj1stakc

  • MD5

    ddb243f06fbb723058b8cc22739d06b2

  • SHA1

    a354d045d40dca1deed88ab88ca168e566be8938

  • SHA256

    229632e545c7e955fd82b25afd2ca7209c5a0784822013dc1891f09263d0bfdd

  • SHA512

    7a1e8204b22af54abe8e99b6b6cb4f464248942ff1e5f8b42a1db86118cc6edbe19acfc8a25d06fa083131db2894ae3af6ef845a05ccb8fbbbb116ca24ddf84b

Score
10/10
stealcvidarstealer

Malware Config

Extracted

Family

vidar

C2

https://aliszon.xyz

https://t.me/g067n

https://steamcommunity.com/profiles/76561199707802586
Attributes
  • user_agent

    Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) AppleWebKit/534.6 (KHTML, like Gecko) Chrome/8.0.500.0 Safari/534.6

Targets

    • Target

      snVG2I5B

    • Size

      2KB

    • MD5

      ddb243f06fbb723058b8cc22739d06b2

    • SHA1

      a354d045d40dca1deed88ab88ca168e566be8938

    • SHA256

      229632e545c7e955fd82b25afd2ca7209c5a0784822013dc1891f09263d0bfdd

    • SHA512

      7a1e8204b22af54abe8e99b6b6cb4f464248942ff1e5f8b42a1db86118cc6edbe19acfc8a25d06fa083131db2894ae3af6ef845a05ccb8fbbbb116ca24ddf84b

    Score
    10/10
    stealcvidarstealer

    • Detect Vidar Stealer

      stealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks