Analysis
-
max time kernel
95s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
-
submitted
01-02-2025 20:46
General
-
Target
uykb.exe
-
Size
272KB
-
MD5
37797bbf221a8b210a987c3822ee35fc
-
SHA1
eaa09aee812bd2466c0b750f9edc7e66088c38e2
-
SHA256
76106d902328efa1e4a8c815e57a130f763a0a1ed5bfd1ba5707874c3ddaa84c
-
SHA512
9378befe69eb34494bf2b431147d2cd97bbcd8cc3dd173a097aa0e6facca00314d1f6d843c9a5b09866ec37c13c602833447c4fe52bbbec545d1b9ef544e440b
-
SSDEEP
3072:ne/3hGz8Su8ucwsy7vf7Qy63S9scCh4slxWsr7i9O3WWsZHpV0iukwEEfzqygF/S:n6xqucZy7vf8f3oMRxb/3W1Hp91Gq
Malware Config
Extracted
vidar
https://t.me/m08mbk
https://steamcommunity.com/profiles/76561199820567237
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0
Signatures
-
Vidar
Vidar is an infostealer based on Arkei stealer.
-
Vidar family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\uykb.exe"C:\Users\Admin\AppData\Local\Temp\uykb.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
300KB
-
Filesize
300KB