Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
-
submitted
10-02-2025 15:42
General
-
Target
d6b9acfd38327128979a14e3ef1ff9c9a052d439c998d798aa7b2657a0bd10c3.exe
-
Size
400KB
-
MD5
d39f358091bec2d98063b4991f88c22d
-
SHA1
bb7652502b89bda8b20f03756fb4f95584ebb0dc
-
SHA256
d6b9acfd38327128979a14e3ef1ff9c9a052d439c998d798aa7b2657a0bd10c3
-
SHA512
cb79b925c7ec768b57175faecc0232c520b1baebc4143339e58d322f9c04b02447869a834d16195d637858f35386f28497079f023edde533196c884aa2d2bc74
-
SSDEEP
6144:jGuc2xpwcL4bLCilVfghK6cwqwKAmJY2KC85v1eCHn0Btc:jGUwcsbLfffWK6cb5AoY2CXBUBt
Malware Config
Extracted
vidar
3.7
3fd4276359426d3f88dfb0a16da8739d
https://steamcommunity.com/profiles/76561199501059503
https://t.me/mastersbots
-
profile_id_v2
3fd4276359426d3f88dfb0a16da8739d
-
user_agent
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0
Signatures
-
Vidar
Vidar is an infostealer based on Arkei stealer.
-
Vidar family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d6b9acfd38327128979a14e3ef1ff9c9a052d439c998d798aa7b2657a0bd10c3.exe"C:\Users\Admin\AppData\Local\Temp\d6b9acfd38327128979a14e3ef1ff9c9a052d439c998d798aa7b2657a0bd10c3.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
372KB
-
Filesize
452KB
-
Filesize
1024KB
-
Filesize
372KB
-
Filesize
452KB
-
Filesize
31.5MB