Overview

overview

10

Static

static

1

URLScan

urlscan

https://www.youtube....

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbWczak1xUGVYMERZWVF1WHBVYkRqV2Zid0JQUXxBQ3Jtc0traHNMcmVWMHdwbjEtMkpFY1cwZXM2VTB1OGFUQ0ZuNGJhNUVJX19GZ2U2RFE2akNDMWRqWG1vUU1BLVZHQkh5eGtsc2xyWW9BVS1CSjJhSnJmR0ZaV1BZZ2JfWEJMcDdHb0JWS01PWFFuakpHWURWMA&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2F3is42kz6mwjhj%2FFiles&v=S4PddgL0Gm0

  • Sample

    241006-zh8v9avdmr

Score
10/10
vidar346a77fbabba142b23c256004b5a7c5ddiscoverystealer

Malware Config

Extracted

Family

vidar

Version

11

Botnet

346a77fbabba142b23c256004b5a7c5d

C2

https://steamcommunity.com/profiles/76561199780418869

https://t.me/ae5ed
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0

Targets

    • Target

      https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbWczak1xUGVYMERZWVF1WHBVYkRqV2Zid0JQUXxBQ3Jtc0traHNMcmVWMHdwbjEtMkpFY1cwZXM2VTB1OGFUQ0ZuNGJhNUVJX19GZ2U2RFE2akNDMWRqWG1vUU1BLVZHQkh5eGtsc2xyWW9BVS1CSjJhSnJmR0ZaV1BZZ2JfWEJMcDdHb0JWS01PWFFuakpHWURWMA&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2F3is42kz6mwjhj%2FFiles&v=S4PddgL0Gm0

    Score
    10/10
    vidar346a77fbabba142b23c256004b5a7c5ddiscoverystealer

    • Detect Vidar Stealer

      stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks