Overview

overview

10

Static

static

3

2025-01-30...ch.exe

windows7-x64

10

2025-01-30...ch.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-30_240a09c31d5ac960e3b759bf2add0952_frostygoop_poet-rat_snatch

  • Size

    5.2MB

  • Sample

    250130-yg4z8ssqcn

  • MD5

    240a09c31d5ac960e3b759bf2add0952

  • SHA1

    75e1dfcf614a7f512d6ba7935d345e5fb841c834

  • SHA256

    1a08cc34dde16977aff1cf7e4ffbc88baacd734a0b92c5eaad1955b705044ba1

  • SHA512

    7775e3876cb5d5dad859305222fbeb5e4b03d59ac4571a297f677e322252f2f452a964de47c9b5b1429bbb0ca996660e1b5d9f4304d7b4a25d17a741c19ca3ad

  • SSDEEP

    49152:QJmpFB5eLTr7WWTbCdvGew+GBf80eRCmwcAVIm2JXdYUu0x184az:QJmpFrK37WWHYvOfmwBeK4a

Score
10/10
vidardiscoverystealer

Malware Config

Extracted

Family

vidar

C2

https://t.me/m08mbk

https://steamcommunity.com/profiles/76561199820567237
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0

Targets

    • Target

      2025-01-30_240a09c31d5ac960e3b759bf2add0952_frostygoop_poet-rat_snatch

    • Size

      5.2MB

    • MD5

      240a09c31d5ac960e3b759bf2add0952

    • SHA1

      75e1dfcf614a7f512d6ba7935d345e5fb841c834

    • SHA256

      1a08cc34dde16977aff1cf7e4ffbc88baacd734a0b92c5eaad1955b705044ba1

    • SHA512

      7775e3876cb5d5dad859305222fbeb5e4b03d59ac4571a297f677e322252f2f452a964de47c9b5b1429bbb0ca996660e1b5d9f4304d7b4a25d17a741c19ca3ad

    • SSDEEP

      49152:QJmpFB5eLTr7WWTbCdvGew+GBf80eRCmwcAVIm2JXdYUu0x184az:QJmpFrK37WWHYvOfmwBeK4a

    Score
    10/10
    vidardiscoverystealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar family

      vidar

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks