Overview

overview

10

Static

static

3

kw8fwzf055...3v.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    kw8fwzf055hq2bo1s8mhd43v.exe

  • Size

    9.8MB

  • Sample

    250120-t1b2caylev

  • MD5

    2a7ec240fa5e25c92b2b78c4f1002ea0

  • SHA1

    bca1465b8bafa5fe58d96d4289356d40c3d44155

  • SHA256

    2c973057cbbe0d9836f477281a06b51c6ce009c5ac7683f4255743e7d01ca9ca

  • SHA512

    dba36379cd0532301193b25ffc4c9b74406efc08ca2d2ce0fec06c115abdde2ab0409bfda1f8bf85ce50764a59503ab0d5b1efbbd641b4caec1dde910d220df3

  • SSDEEP

    98304:D2FemCZvjc2SdS7Q+6qfx0Suals9I/f0E7zs/Ym6lQCpR2RJncpl2:6FeppPfxLsQf/7zLzVpWnQ2

Score
10/10
vidarfc0stndiscoverystealer

Malware Config

Extracted

Family

vidar

Botnet

fc0stn

C2

https://t.me/w0ctzn

https://steamcommunity.com/profiles/76561199817305251
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:131.0) Gecko/20100101 Firefox/131.0

Targets

    • Target

      kw8fwzf055hq2bo1s8mhd43v.exe

    • Size

      9.8MB

    • MD5

      2a7ec240fa5e25c92b2b78c4f1002ea0

    • SHA1

      bca1465b8bafa5fe58d96d4289356d40c3d44155

    • SHA256

      2c973057cbbe0d9836f477281a06b51c6ce009c5ac7683f4255743e7d01ca9ca

    • SHA512

      dba36379cd0532301193b25ffc4c9b74406efc08ca2d2ce0fec06c115abdde2ab0409bfda1f8bf85ce50764a59503ab0d5b1efbbd641b4caec1dde910d220df3

    • SSDEEP

      98304:D2FemCZvjc2SdS7Q+6qfx0Suals9I/f0E7zs/Ym6lQCpR2RJncpl2:6FeppPfxLsQf/7zLzVpWnQ2

    Score
    10/10
    vidarfc0stndiscoverystealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar family

      vidar

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks