Overview

overview

10

Static

static

1

25a15af2ba...66.exe

windows7-x64

10

25a15af2ba...66.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25a15af2bab20ec576f778acfde2f027d31b2c1c389ab707360e8397724d7f66.zip

  • Size

    377KB

  • Sample

    250219-vt32xsvnev

  • MD5

    7e970f0def533bae9dda850febbe6531

  • SHA1

    09c0246cd20296aaa929bb1e723a5abd01c0a0a4

  • SHA256

    b679a6acd8f938b51a635855ea772b6c98ba25d165c71a5082d4cedf90c9af82

  • SHA512

    044fc92ac77da9c9810f2d1818d92ae0f01fa590b0a490a2e0048ac84e001375bfabd9a6dc1fa2380ae0b8a941a849a7fa41264100087eb434b8f91ffd085336

  • SSDEEP

    6144:l5DlWHgKExoaO5US5xGHKGdSqe648Yoos61WKX209sX0qF4PfRhFoiYzCrSjbOTa:PDIgpxxmzGNu8fz61x2YsEqF4xhFHR/2

Score
10/10
vidarfc0stndiscoverystealer

Malware Config

Extracted

Family

vidar

Botnet

fc0stn

C2

https://t.me/w0ctzn

https://steamcommunity.com/profiles/76561199817305251
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:131.0) Gecko/20100101 Firefox/131.0

Targets

    • Target

      25a15af2bab20ec576f778acfde2f027d31b2c1c389ab707360e8397724d7f66.exe

    • Size

      390KB

    • MD5

      9c11f8b0f55dfbcd4b67c6a56fb0f11f

    • SHA1

      040437d898ccf617506617f9d12b364ae8784727

    • SHA256

      25a15af2bab20ec576f778acfde2f027d31b2c1c389ab707360e8397724d7f66

    • SHA512

      5da2d3d68f5a58aa7323abfc175452ea7e5b6f94526a5f6ecb4a0aef6b2374475825abb25f42ff82f3af30e1dcf85fe5ba7778e61796f2a84152e317f016b118

    • SSDEEP

      12288:mfeZUvaamvY7kmA7YJCMKKvzKbkL+Kawd:AVpmQntvKKvAxBW

    Score
    10/10
    vidarfc0stndiscoverystealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar family

      vidar

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks