General

  • Target

    fdf090545751ce09207f7cec140d21d246cb2f25002683e2cd36c92e18707f56.exe

  • Size

    282KB

  • Sample

    240913-ceweesxhnr

  • MD5

    3a507b0b6463481cbb8d248efa262ddd

  • SHA1

    97cc6f79eb1352660997a2194d7d3c9e1aff7a0e

  • SHA256

    fdf090545751ce09207f7cec140d21d246cb2f25002683e2cd36c92e18707f56

  • SHA512

    4e0abe7ecd536b25146a663ebc49afd955727d32e2e01a6b7305afec79decbc649e95e841d18e226e346eb4d1e91228c215888c1ffb5363d888f6a1a6fed57a8

  • SSDEEP

    6144:4ELt9KOtbS8O8F+pQ1UUPeZEUA85wR1ffmFSA7aFkHJuNEO:37tbStpixPRUkWB7a0wNEO

Score
10/10

Malware Config

Extracted

Family

vidar

C2

https://t.me/edm0d

https://steamcommunity.com/profiles/76561199768374681

Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0

Targets

    • Target

      fdf090545751ce09207f7cec140d21d246cb2f25002683e2cd36c92e18707f56.exe

    • Size

      282KB

    • MD5

      3a507b0b6463481cbb8d248efa262ddd

    • SHA1

      97cc6f79eb1352660997a2194d7d3c9e1aff7a0e

    • SHA256

      fdf090545751ce09207f7cec140d21d246cb2f25002683e2cd36c92e18707f56

    • SHA512

      4e0abe7ecd536b25146a663ebc49afd955727d32e2e01a6b7305afec79decbc649e95e841d18e226e346eb4d1e91228c215888c1ffb5363d888f6a1a6fed57a8

    • SSDEEP

      6144:4ELt9KOtbS8O8F+pQ1UUPeZEUA85wR1ffmFSA7aFkHJuNEO:37tbStpixPRUkWB7a0wNEO

    Score
    10/10
    • Detect Vidar Stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks