Resubmissions
23/09/2026, 17:04
260923-vledlayx6m06/09/2026, 10:43
260906-msd3eashke01/09/2026, 13:41
260901-qzhwqazepg01/09/2026, 12:58
260901-p7y28szbqc1018/08/2026, 20:05
260818-yt533azcke1016/08/2026, 10:12
260816-l8ylbahj9t15/08/2026, 21:01
260815-ztx8wstdla15/08/2026, 20:42
260815-zhhdastyfv14/08/2026, 18:02
260814-wmq98afk9109/08/2026, 10:50
260809-mxkqrazta1Analysis
- max time kernel
600s - max time network
470s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
26/06/2026, 14:34
General
- Target Supernova/4e63ad7ed49f94572e409e6764c8d1ca4f2253643f527fd2f03deab7fae691ac.exe
- Size 8.1MB
- Sample260626-rxt2mscs3x
- SHA256 4e63ad7ed49f94572e409e6764c8d1ca4f2253643f527fd2f03deab7fae691ac
Malware Config
Extracted
-
vidar
-
17.8
-
0c21a99a3efb554917252ac08ba93fa5
-
https://telegram.me/ho00rq
-
https://steamcommunity.com/profiles/76561198742173262
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0
Signatures
- Family: Vidar
Vidar is an infostealer based on Arkei stealer.
- Detects Vidar Stealer 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Supernova\4e63ad7ed49f94572e409e6764c8d1ca4f2253643f527fd2f03deab7fae691ac.exe"C:\Users\Admin\AppData\Local\Temp\Supernova\4e63ad7ed49f94572e409e6764c8d1ca4f2253643f527fd2f03deab7fae691ac.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/892-0-0x0000000000DA0000-0x0000000000DA1000-memory.dmp
memory/892-2-0x0000000140000000-0x00000001400C0000-memory.dmp
memory/892-6-0x0000000002FA0000-0x0000000003056000-memory.dmp
memory/892-7-0x0000000140000000-0x00000001400C0000-memory.dmp
memory/892-25-0x0000000000DA0000-0x0000000000DA1000-memory.dmp
memory/892-27-0x0000000002FA0000-0x0000000003056000-memory.dmp
memory/892-26-0x0000000000400000-0x0000000000C36000-memory.dmp
memory/892-48-0x0000000140000000-0x00000001400C0000-memory.dmp