General

  • Target

    Roblox Cheat Free.rar

  • Size

    1.6MB

  • Sample

    241124-ya273a1phr

  • MD5

    4ba1bd42e77a2370c240d08e568efc72

  • SHA1

    b1d86361ed425fcf70e77f23d90867d87f1a7353

  • SHA256

    81e9674a18dcb4fad7e6314b353b71de92f04116438b950fdf177a1b0c5f1525

  • SHA512

    3482b3fb9c78958e482aa2115e661f7128b9bf9ea492d488810cb40d929f3a3e8ef6ee4e4ca94546afe8bd4be83ddd759aa743ba612abd4347e489eed8fa67d0

  • SSDEEP

    49152:mwnklGp051IOBaI8QTkH/oXeUC3A4Z4gzk9JOw:mCAGpDOAI8QTu/rLwG4Yw

Malware Config

Extracted

Family

vidar

Version

11.7

Botnet

a17f83dafa130de24986f1ad305270d5

C2

https://t.me/m07mbk

https://steamcommunity.com/profiles/76561199801589826

Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6

Targets

    • Target

      Roblox Cheat Free.rar

    • Size

      1.6MB

    • MD5

      4ba1bd42e77a2370c240d08e568efc72

    • SHA1

      b1d86361ed425fcf70e77f23d90867d87f1a7353

    • SHA256

      81e9674a18dcb4fad7e6314b353b71de92f04116438b950fdf177a1b0c5f1525

    • SHA512

      3482b3fb9c78958e482aa2115e661f7128b9bf9ea492d488810cb40d929f3a3e8ef6ee4e4ca94546afe8bd4be83ddd759aa743ba612abd4347e489eed8fa67d0

    • SSDEEP

      49152:mwnklGp051IOBaI8QTkH/oXeUC3A4Z4gzk9JOw:mCAGpDOAI8QTu/rLwG4Yw

    • Detect Vidar Stealer

    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Vidar family

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks