General
-
Target
https://www.dropbox.com/scl/fi/67epyl2uw2x9t8y93bkch/Unlock_Tool.zip?rlkey=g0dmjtoajve5wofhntuxo673o&st=ibvvsshl&dl=1
-
Sample
241113-sdphgstfre
Score
10/10
Malware Config
Extracted
Family
vidar
Version
11.7
Botnet
4b05932e298d86a233eec0514ef2c4f6
C2
https://t.me/m07mbk
https://steamcommunity.com/profiles/76561199801589826
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6
Targets
-
-
Target
https://www.dropbox.com/scl/fi/67epyl2uw2x9t8y93bkch/Unlock_Tool.zip?rlkey=g0dmjtoajve5wofhntuxo673o&st=ibvvsshl&dl=1
Score10/10-
Detect Vidar Stealer
-
Vidar
Vidar is an infostealer based on Arkei stealer.
-
Vidar family
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-