Overview

overview

10

Static

static

1

8fd06cfe41...18.exe

windows7-x64

10

8fd06cfe41...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8fd06cfe41c9aa5a7b58488d0bc2bd18.exe

  • Size

    598KB

  • Sample

    241008-r8p7tsvhje

  • MD5

    8fd06cfe41c9aa5a7b58488d0bc2bd18

  • SHA1

    915937f169d3dc5fe918435e81f645074304cf9c

  • SHA256

    6855feaad22b9fab33f782a030dca8efeceb300eb547e0a9ce5cb36520f1bddc

  • SHA512

    57f51f7a42108d41f4583fec480d35e634b5d228c49adee24d1c21e0a01142f8edd2781ff8a1168e8350e7d988da2eaf3e0fd53b6a1a5aac891225d2a4e5ab3b

  • SSDEEP

    12288:VUqvMSDFMq2q0KOfCy2PD4OCB7lR4Cdxd/8eWS64fLETEO:VU8HDFFOayc1CB7laCtS+mt

Score
10/10
vidar8ecc9c7eaebfdf2a8cc0586d7419d6eadiscoverystealer

Malware Config

Extracted

Family

vidar

Botnet

8ecc9c7eaebfdf2a8cc0586d7419d6ea

C2

https://t.me/maslengdsa

https://steamcommunity.com/profiles/76561199786602107

https://t.me/lpnjoke
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0

Targets

    • Target

      8fd06cfe41c9aa5a7b58488d0bc2bd18.exe

    • Size

      598KB

    • MD5

      8fd06cfe41c9aa5a7b58488d0bc2bd18

    • SHA1

      915937f169d3dc5fe918435e81f645074304cf9c

    • SHA256

      6855feaad22b9fab33f782a030dca8efeceb300eb547e0a9ce5cb36520f1bddc

    • SHA512

      57f51f7a42108d41f4583fec480d35e634b5d228c49adee24d1c21e0a01142f8edd2781ff8a1168e8350e7d988da2eaf3e0fd53b6a1a5aac891225d2a4e5ab3b

    • SSDEEP

      12288:VUqvMSDFMq2q0KOfCy2PD4OCB7lR4Cdxd/8eWS64fLETEO:VU8HDFFOayc1CB7laCtS+mt

    Score
    10/10
    vidar8ecc9c7eaebfdf2a8cc0586d7419d6eadiscoverystealer

    • Detect Vidar Stealer

      stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Downloads MZ/PE file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks