Analysis
- max time kernel
150s - max time network
146s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
17/04/2026, 12:14
General
- Target FAvFf4V3.exe
- Size 2.5MB
- Sample260417-pene2af13x
- SHA256 0150605913e5cc05dbe79ed8f488d58140ac7c2853ca7853a7a78e9885628b9a
Malware Config
Extracted
-
vidar
-
1.1
-
02f09c1360c66badc8949b37aca8ea9d
-
https://fuz.supportify360.io
-
https://telegram.me/nwwfh8
-
https://steamcommunity.com/profiles/76561198719385745
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:140.0) Gecko/20100101 Firefox/140.0
Signatures
- Family: Vidar
Vidar is an infostealer based on Arkei stealer.
- Detects Vidar Stealer 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FAvFf4V3.exe"C:\Users\Admin\AppData\Local\Temp\FAvFf4V3.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2072-0-0x0000000140000000-0x0000000140105000-memory.dmp
memory/2072-1-0x0000000140000000-0x0000000140105000-memory.dmp
memory/2072-14-0x00000204EB2D0000-0x00000204EB2D9000-memory.dmp
memory/2072-13-0x00000204EAE70000-0x00000204EAF0E000-memory.dmp
memory/2072-15-0x0000000140000000-0x0000000140105000-memory.dmp
memory/2072-24-0x00000204EB310000-0x00000204EB31C000-memory.dmp
memory/2072-39-0x0000000140000000-0x0000000140105000-memory.dmp
memory/2072-52-0x00000204EB2D0000-0x00000204EB2D9000-memory.dmp
memory/2072-53-0x00000204EB310000-0x00000204EB31C000-memory.dmp
memory/2072-51-0x00000204EAE70000-0x00000204EAF0E000-memory.dmp