General
- Target https://www.dropbox.com/scl/fi/67epyl2uw2x9t8y93bkch/Unlock_Tool.zip?rlkey=g0dmjtoajve5wofhntuxo673o&st=ibvvsshl&dl=1
- Sample241113-sdphgstfre
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.dropbox.com/scl/fi/67epyl2uw2x9t8y93bkch/Unlock_Tool.zip?rlkey=g0dmjtoajve5wofhntuxo673o&st=ibvvsshl&dl=1
Resource
win10v2004-20241007-en
16 signatures
600 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
11.7
Botnet
-
4b05932e298d86a233eec0514ef2c4f6
C2
-
https://t.me/m07mbk
-
https://steamcommunity.com/profiles/76561199801589826
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6
Targets
-
- Target https://www.dropbox.com/scl/fi/67epyl2uw2x9t8y93bkch/Unlock_Tool.zip?rlkey=g0dmjtoajve5wofhntuxo673o&st=ibvvsshl&dl=1
Detect Vidar Stealer
Vidar family
Executes dropped EXE
Suspicious use of SetThreadContext