Overview

overview

10

Static

static

1

58ade81f8a...b0.exe

windows7-x64

10

58ade81f8a...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    58ade81f8abeefd49c3e1d77bf7284e2ccb15e5e56622c39a5a5e98eafd61eb0

  • Size

    500KB

  • Sample

    250121-cwhvna1pej

  • MD5

    29d08dc04094d437a685e46db50d80a4

  • SHA1

    6cf1d4d30fb7ddfeb97b2e5167b8f5ec69bf9b3e

  • SHA256

    58ade81f8abeefd49c3e1d77bf7284e2ccb15e5e56622c39a5a5e98eafd61eb0

  • SHA512

    84ddfac2abf6e546d8e7e4757262f200c528c2051a7cc92bb7a6c83adafdd0ec5e011813329745ba5589475fbecf7ae3825bf359264390978508c1c6f5ce145c

  • SSDEEP

    12288:zA0WoeZUvaamvY7kmA7YJCMKKvTKbkL+Kawd:00XVpmQntvKKvgxBW

Score
10/10
vidarfc0stndiscoverystealer

Malware Config

Extracted

Family

vidar

Botnet

fc0stn

C2

https://t.me/w0ctzn

https://steamcommunity.com/profiles/76561199817305251
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:131.0) Gecko/20100101 Firefox/131.0

Targets

    • Target

      58ade81f8abeefd49c3e1d77bf7284e2ccb15e5e56622c39a5a5e98eafd61eb0

    • Size

      500KB

    • MD5

      29d08dc04094d437a685e46db50d80a4

    • SHA1

      6cf1d4d30fb7ddfeb97b2e5167b8f5ec69bf9b3e

    • SHA256

      58ade81f8abeefd49c3e1d77bf7284e2ccb15e5e56622c39a5a5e98eafd61eb0

    • SHA512

      84ddfac2abf6e546d8e7e4757262f200c528c2051a7cc92bb7a6c83adafdd0ec5e011813329745ba5589475fbecf7ae3825bf359264390978508c1c6f5ce145c

    • SSDEEP

      12288:zA0WoeZUvaamvY7kmA7YJCMKKvTKbkL+Kawd:00XVpmQntvKKvgxBW

    Score
    10/10
    vidarfc0stndiscoverystealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar family

      vidar

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks