Overview

overview

10

Static

static

3

main.exe

windows7-x64

10

main.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    main.exe

  • Size

    5.5MB

  • Sample

    250216-a8f6gstkbj

  • MD5

    eecbb2f1515cb2641fbe0bff5ab58666

  • SHA1

    10872a62432810af4dd554266e45568e3b2c2c69

  • SHA256

    15f08b0d3b2c8de41d8f513a0ef0e47e997b3c566d77da5086c60532bde5e123

  • SHA512

    faf2a97e5a6e464080757d919e640831e199f80c93bd23c0f3e60c289d4d01d464bb6608a94544c4debca57b7040c9a85a4690f95c002544d6e9741e374c9d60

  • SSDEEP

    49152:2t3JU3uessKtr7V9hU+tM8B1+nC0RS3HGzT+ZKFVY3W409PXqYR6ZIsUFP52nMm4:29JU+cKtr7V9ekM7S70PR+Cud3vx

Score
10/10
vidarfc0stndiscoverystealer

Malware Config

Extracted

Family

vidar

Botnet

fc0stn

C2

https://t.me/w0ctzn

https://steamcommunity.com/profiles/76561199817305251
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:131.0) Gecko/20100101 Firefox/131.0

Targets

    • Target

      main.exe

    • Size

      5.5MB

    • MD5

      eecbb2f1515cb2641fbe0bff5ab58666

    • SHA1

      10872a62432810af4dd554266e45568e3b2c2c69

    • SHA256

      15f08b0d3b2c8de41d8f513a0ef0e47e997b3c566d77da5086c60532bde5e123

    • SHA512

      faf2a97e5a6e464080757d919e640831e199f80c93bd23c0f3e60c289d4d01d464bb6608a94544c4debca57b7040c9a85a4690f95c002544d6e9741e374c9d60

    • SSDEEP

      49152:2t3JU3uessKtr7V9hU+tM8B1+nC0RS3HGzT+ZKFVY3W409PXqYR6ZIsUFP52nMm4:29JU+cKtr7V9ekM7S70PR+Cud3vx

    Score
    10/10
    vidarfc0stndiscoverystealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar family

      vidar

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks