Analysis
-
max time kernel
106s -
max time network
110s -
platform
windows11-21h2_x64 -
resource
win11-20241023-en -
resource tags
-
submitted
27-01-2025 15:41
General
-
Target
MasterKey_Pro_v2.6.exe
-
Size
51.8MB
-
MD5
778aac0c85bf6e0655133b63c825be7e
-
SHA1
e1031eb6414b7da3763d8223632972c343d3c4e6
-
SHA256
fda09eddde8357527c812e3c238127a1ff45a5f0cd5dc438dd7bc7191d35d839
-
SHA512
df990e1fc78f94533df1e9bfa5511ce963e70065e3d03f0f82331acd24204fa8ccfcc81a2193a77972fdc1a24ac4852dbbe867f55f9dd8c3a09f6f6f52e652f7
-
SSDEEP
786432:2QsAAcl8Tv0/3ordJhChFuiZQKDCmCKEnAJqAaf7lgtnJTEJT2tySygHYn7DWPXr:VlAcl8Q3oPhyp6eQAJXAhgVWlLr/gJ9/
Malware Config
Extracted
vidar
https://t.me/sc1phell
https://steamcommunity.com/profiles/76561199819539662
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0
Signatures
-
Detect Vidar Stealer 2 IoCs
-
Vidar
Vidar is an infostealer based on Arkei stealer.
-
Vidar family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\MasterKey_Pro_v2.6.exe"C:\Users\Admin\AppData\Local\Temp\MasterKey_Pro_v2.6.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB