Overview

overview

10

Static

static

3

fm.exe

windows7-x64

10

fm.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fm

  • Size

    4.9MB

  • Sample

    250203-p1dgys1net

  • MD5

    a6974982ceb1a656f6db988828842d87

  • SHA1

    9fbd537a58f1a2f9ee78b4278413ba091ca65cfa

  • SHA256

    c9ed91a8bbdcccda38901f1a70590c8ecb9c813109922b3465471d678cc20868

  • SHA512

    6facd84a6d4622b1c435bf9f77dd7bf4fb5fef222e97e58a62961f571654ad45c0a287195827567ffb17bf26746097577f19638286ac92af0eaf4c9398b82a83

  • SSDEEP

    49152:0T8pWSX5MEq9/DD9dnEtVv2+QVGeWX0iZsml4eGMrEqAtuShOuInfmuh9cHlV/2F:0aWcHiDDjKV9e233y0ZwfK

Score
10/10
vidardiscoverystealer

Malware Config

Extracted

Family

vidar

C2

https://t.me/m08mbk

https://steamcommunity.com/profiles/76561199820567237
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0

Targets

    • Target

      fm

    • Size

      4.9MB

    • MD5

      a6974982ceb1a656f6db988828842d87

    • SHA1

      9fbd537a58f1a2f9ee78b4278413ba091ca65cfa

    • SHA256

      c9ed91a8bbdcccda38901f1a70590c8ecb9c813109922b3465471d678cc20868

    • SHA512

      6facd84a6d4622b1c435bf9f77dd7bf4fb5fef222e97e58a62961f571654ad45c0a287195827567ffb17bf26746097577f19638286ac92af0eaf4c9398b82a83

    • SSDEEP

      49152:0T8pWSX5MEq9/DD9dnEtVv2+QVGeWX0iZsml4eGMrEqAtuShOuInfmuh9cHlV/2F:0aWcHiDDjKV9e233y0ZwfK

    Score
    10/10
    vidardiscoverystealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar family

      vidar

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks