General
-
Target
https://www.modmenu.top/BrickRigs
-
Sample
241120-n69a5sxbkk
Score
10/10
Malware Config
Extracted
Family
vidar
Version
11.8
Botnet
0488b9927a0f6f664c950978946c718c
C2
https://t.me/fu4chmo
https://steamcommunity.com/profiles/76561199802540894
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6
Targets
-
-
Target
https://www.modmenu.top/BrickRigs
Score10/10-
Detect Vidar Stealer
-
Stealc
Stealc is an infostealer written in C++.
-
Stealc family
-
Vidar
Vidar is an infostealer based on Arkei stealer.
-
Vidar family
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Downloads MZ/PE file
-
Executes dropped EXE
-