Overview

overview

10

Static

static

3

file.exe

windows10-ltsc_2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    820KB

  • Sample

    250420-s5d6tsy1dz

  • MD5

    3cd0db86d5e81b8825b77e67df41bf1a

  • SHA1

    cd22219cff15afd6666866a39025cdbabcf39672

  • SHA256

    f0e69027e42692d86e5568255610cf9b07223b9cf07327a3d78086c60102e47d

  • SHA512

    30c04177a69bf1796ec2f059031f280a385dfeeeadb84e66172f6258efbb96184905604a402b65889430948aef0f5e8d1e86370f5959157618c52374f00821df

  • SSDEEP

    12288:4/DKcz2a8Ep3A5WWwLUWdt6/FcMMSdLHmc+9LKLdEEo4Edka+9LKLdEEo4Edkl:QKcz2aN34WWXN/FAcaKLdjRaaKLdjRl

Score
10/10
vidarc466785b3a34d7b3c4d6db04a068b664discoverystealer

Malware Config

Extracted

Family

vidar

Version

13.5

Botnet

c466785b3a34d7b3c4d6db04a068b664

C2

https://t.me/v00rd

https://steamcommunity.com/profiles/76561199846773220
Attributes
  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/132.0.0.0 Safari/537.36 OPR/117.0.0.0

Targets

    • Target

      file.exe

    • Size

      820KB

    • MD5

      3cd0db86d5e81b8825b77e67df41bf1a

    • SHA1

      cd22219cff15afd6666866a39025cdbabcf39672

    • SHA256

      f0e69027e42692d86e5568255610cf9b07223b9cf07327a3d78086c60102e47d

    • SHA512

      30c04177a69bf1796ec2f059031f280a385dfeeeadb84e66172f6258efbb96184905604a402b65889430948aef0f5e8d1e86370f5959157618c52374f00821df

    • SSDEEP

      12288:4/DKcz2a8Ep3A5WWwLUWdt6/FcMMSdLHmc+9LKLdEEo4Edka+9LKLdEEo4Edkl:QKcz2aN34WWXN/FAcaKLdjRaaKLdjRl

    Score
    10/10
    vidarc466785b3a34d7b3c4d6db04a068b664discoverystealer

    • Detect Vidar Stealer

      stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar family

      vidar

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks