Overview

overview

10

Static

static

3

610405206f...05.exe

windows7-x64

10

610405206f...05.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    610405206f96bddcd27807b4bd21b14307bba9edd0fecd9cb70e947f10f83b05.exe

  • Size

    8.1MB

  • Sample

    250123-eaachazqgz

  • MD5

    7a58b56b7f6c48e110f9ed84d25f0286

  • SHA1

    73bbfca9d18b9eeb933f36fc2ba37bf48dfcddb4

  • SHA256

    610405206f96bddcd27807b4bd21b14307bba9edd0fecd9cb70e947f10f83b05

  • SHA512

    5ffd74a253854e8c8e6254f79eb123aa7b730631aea846389261d00faadc2a66dadf037d26902bedb1f0449e6955c38ff4911d850e13e3f68117459cd3247e9b

  • SSDEEP

    98304:dhFvAJyeCllfUonZRljtdRHDhbNhVvF8Dtg5t+7bxQ9AH:HmjoZRlRHTP9x9AH

Score
10/10
vidarfc0stndiscoverystealer

Malware Config

Extracted

Family

vidar

Botnet

fc0stn

C2

https://t.me/w0ctzn

https://steamcommunity.com/profiles/76561199817305251
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:131.0) Gecko/20100101 Firefox/131.0

Targets

    • Target

      610405206f96bddcd27807b4bd21b14307bba9edd0fecd9cb70e947f10f83b05.exe

    • Size

      8.1MB

    • MD5

      7a58b56b7f6c48e110f9ed84d25f0286

    • SHA1

      73bbfca9d18b9eeb933f36fc2ba37bf48dfcddb4

    • SHA256

      610405206f96bddcd27807b4bd21b14307bba9edd0fecd9cb70e947f10f83b05

    • SHA512

      5ffd74a253854e8c8e6254f79eb123aa7b730631aea846389261d00faadc2a66dadf037d26902bedb1f0449e6955c38ff4911d850e13e3f68117459cd3247e9b

    • SSDEEP

      98304:dhFvAJyeCllfUonZRljtdRHDhbNhVvF8Dtg5t+7bxQ9AH:HmjoZRlRHTP9x9AH

    Score
    10/10
    vidarfc0stndiscoverystealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar family

      vidar

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks