Overview

overview

10

Static

static

3

04a4f32fae41.exe

windows7-x64

10

04a4f32fae41.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04a4f32fae41.exe

  • Size

    551KB

  • Sample

    241004-xt65pa1dmk

  • MD5

    911b5946134122b09c15fd86f272fad9

  • SHA1

    107db94e75cac1d58e28171e159a1e1fd300f4ca

  • SHA256

    ae2be5054bfc203abf578a97ac7356b7245380de01b2bb8182dd21b83295e356

  • SHA512

    7df124ca4cd183af04b74a84496c873e57f4a593596e9bb51f4ad9390e881a9b3a30cc3ae9fa70d4d2d855845a04e87eeb426d82fdef0a402e88e9148f2b58de

  • SSDEEP

    12288:KLMb3AhDsvDjK8rIMVY+zQwR5npffj/k+XcUCLHLNAlksevM2iqPfVnVsP:KLOSun8wRvf789UwrN4IE27nV4

Score
10/10
vidardiscoverystealer

Malware Config

Extracted

Family

vidar

C2

http://proxy.johnmccrea.com/

https://steamcommunity.com/profiles/76561199780418869

https://t.me/ae5ed
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0

Targets

    • Target

      04a4f32fae41.exe

    • Size

      551KB

    • MD5

      911b5946134122b09c15fd86f272fad9

    • SHA1

      107db94e75cac1d58e28171e159a1e1fd300f4ca

    • SHA256

      ae2be5054bfc203abf578a97ac7356b7245380de01b2bb8182dd21b83295e356

    • SHA512

      7df124ca4cd183af04b74a84496c873e57f4a593596e9bb51f4ad9390e881a9b3a30cc3ae9fa70d4d2d855845a04e87eeb426d82fdef0a402e88e9148f2b58de

    • SSDEEP

      12288:KLMb3AhDsvDjK8rIMVY+zQwR5npffj/k+XcUCLHLNAlksevM2iqPfVnVsP:KLOSun8wRvf789UwrN4IE27nV4

    Score
    10/10
    vidardiscoverystealer

    • Detect Vidar Stealer

      stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Downloads MZ/PE file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks