Overview

overview

10

Static

static

10

2024-12-23...ch.exe

windows7-x64

6

2024-12-23...ch.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-23_a9c36eb66af0de33b933202367810e42_frostygoop_poet-rat_snatch

  • Size

    4.8MB

  • Sample

    241223-s6etratmgr

  • MD5

    a9c36eb66af0de33b933202367810e42

  • SHA1

    a0c54e88f0aec04ae462a8a727c206d7ee5b751c

  • SHA256

    5d443ec3458418f9e383f058b78b77efe55175533698e84b3ef97f82e3e27a5b

  • SHA512

    049ee7434eca256a51027abd26374e94be161cd9134a10e491f50a2eac576eb2640995a81b682c15d007931ebfa504429d870a593725aae35a02b6d3534ade03

  • SSDEEP

    49152:cpfQgfL06Ien/QV/5EKKyVzpMSqSzXo8fsPx7vwoQXzm4SpE28InoVzGc+Xz8H99:kowZHn/SBzXtszQXC4B+I4

Score
10/10
vidar589discoverystealer

Malware Config

Extracted

Family

vidar

Version

911

Extracted

Family

vidar

Version

2.4

Botnet

589

C2

https://t.me/gurutist

https://steamcommunity.com/profiles/76561199476091435

http://95.216.164.28:80
Attributes
  • profile_id

    589

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36

Targets

    • Target

      2024-12-23_a9c36eb66af0de33b933202367810e42_frostygoop_poet-rat_snatch

    • Size

      4.8MB

    • MD5

      a9c36eb66af0de33b933202367810e42

    • SHA1

      a0c54e88f0aec04ae462a8a727c206d7ee5b751c

    • SHA256

      5d443ec3458418f9e383f058b78b77efe55175533698e84b3ef97f82e3e27a5b

    • SHA512

      049ee7434eca256a51027abd26374e94be161cd9134a10e491f50a2eac576eb2640995a81b682c15d007931ebfa504429d870a593725aae35a02b6d3534ade03

    • SSDEEP

      49152:cpfQgfL06Ien/QV/5EKKyVzpMSqSzXo8fsPx7vwoQXzm4SpE28InoVzGc+Xz8H99:kowZHn/SBzXtszQXC4B+I4

    Score
    10/10
    discoveryvidar589stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar family

      vidar

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks