General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
vidar
C2
https://t.me/gos90t
https://steamcommunity.com/profiles/76561199800374635
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6
Targets
-
-
Detect Vidar Stealer
-
Vidar family
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of SetThreadContext
-