General
-
Target
https://cdn-config.com/activator.exe
-
Sample
250123-sqxdvsvpgp
Score
10/10
Malware Config
Extracted
Family
vidar
Botnet
fc0stn
C2
https://t.me/w0ctzn
https://steamcommunity.com/profiles/76561199817305251
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:131.0) Gecko/20100101 Firefox/131.0
Targets
-
-
Target
https://cdn-config.com/activator.exe
Score10/10-
Vidar
Vidar is an infostealer based on Arkei stealer.
-
Vidar family
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-