General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
vidar
Version
11.8
Botnet
635b5ceb8ed09951eb8d5e776815ad72
C2
https://t.me/fu4chmo
https://steamcommunity.com/profiles/76561199802540894
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6
Targets
-
-
Target
https://www.mediafire.com/folder/3is42kz6mwjhj/Files
-
Detect Vidar Stealer
-
Stealc family
-
Vidar family
-
Downloads MZ/PE file
-
A potential corporate email address has been identified in the URL: [email protected]
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-