Overview

overview

10

Static

static

3

amoguuuuus...�f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    amoguuuuus.zip

  • Size

    4.1MB

  • Sample

    241004-3fvgmawhlh

  • MD5

    04e243e59f6217041b7e960c1b3bd8eb

  • SHA1

    f6aa2bf832f41bd64d3a69247bc9233568674638

  • SHA256

    557d7363def47781ae91194ff59d85c3a2f2bf358c19d2b043428f712f334476

  • SHA512

    50c8ca52eb4f7b58a58aba28c7f3abc7b836f1d6a6d616fd16b9caa22025818c9524f712da46c14bf723299a5f59542b22f0c403cfa0dd6df642add935c83ad2

  • SSDEEP

    98304:YZcJMzr92oXsGpAWdIp8fkZmOfTW548aI:0JdqIU8o1a5zn

Score
10/10
vidareaf6a345ac330495ebc83200e0a7497ddiscoverystealer

Malware Config

Extracted

Family

vidar

Version

8.3

Botnet

eaf6a345ac330495ebc83200e0a7497d

C2

https://steamcommunity.com/profiles/76561199651834633

https://t.me/raf6ik
Attributes
  • profile_id_v2

    eaf6a345ac330495ebc83200e0a7497d

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; rv:109.0) Gecko/20100101 Firefox/115.0

Targets

    • Target

      amoguuuuus/sрооf.exe

    • Size

      447KB

    • MD5

      eba859aa8105b84ea4e9e7726d3aa96c

    • SHA1

      2c6b45eba06308dfd0a17776c7a2ef71c9d55b06

    • SHA256

      a18e38ddac5882867a012958d04eebbbe6249ffd7880ff7703f91e6b32c1737d

    • SHA512

      d8f69f8027adfe40af15ba47654a27878c2428ee56f3e1b135c7bfdd38862290ece630d33b38b7c90f23d6f7856b3e183c647c0ac8190807973b8f0cded33d4c

    • SSDEEP

      12288:AUMdX23s7N6pQOAmAPAxRIMQdGTdv8726yuvC3aAnZ:ZKZ6pQxmAPIudGT+wu6N

    Score
    10/10
    vidareaf6a345ac330495ebc83200e0a7497ddiscoverystealer

    • Detect Vidar Stealer

      stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks