Resubmissions
23/09/2026, 17:04
260923-vledlayx6m06/09/2026, 10:43
260906-msd3eashke01/09/2026, 13:41
260901-qzhwqazepg01/09/2026, 12:58
260901-p7y28szbqc1018/08/2026, 20:05
260818-yt533azcke1016/08/2026, 10:12
260816-l8ylbahj9t15/08/2026, 21:01
260815-ztx8wstdla15/08/2026, 20:42
260815-zhhdastyfv14/08/2026, 18:02
260814-wmq98afk9109/08/2026, 10:50
260809-mxkqrazta1Analysis
- max time kernel
599s - max time network
488s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
26/06/2026, 14:34
General
- Target Supernova/4e63ad7ed49f94572e409e6764c8d1ca4f2253643f527fd2f03deab7fae691ac.exe
- Size 8.1MB
- Sample260626-rxt2mscs3x
- SHA256 4e63ad7ed49f94572e409e6764c8d1ca4f2253643f527fd2f03deab7fae691ac
Malware Config
Extracted
-
vidar
-
17.8
-
0c21a99a3efb554917252ac08ba93fa5
-
https://telegram.me/ho00rq
-
https://steamcommunity.com/profiles/76561198742173262
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0
Signatures
- Family: Vidar
Vidar is an infostealer based on Arkei stealer.
- Detects Vidar Stealer 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Supernova\4e63ad7ed49f94572e409e6764c8d1ca4f2253643f527fd2f03deab7fae691ac.exe"C:\Users\Admin\AppData\Local\Temp\Supernova\4e63ad7ed49f94572e409e6764c8d1ca4f2253643f527fd2f03deab7fae691ac.exe"1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5288-0-0x00000000028F0000-0x00000000028F1000-memory.dmp
memory/5288-1-0x0000000140000000-0x00000001400C0000-memory.dmp
memory/5288-6-0x0000000003900000-0x00000000039B6000-memory.dmp
memory/5288-7-0x0000000140000000-0x00000001400C0000-memory.dmp
memory/5288-31-0x0000000003900000-0x00000000039B6000-memory.dmp
memory/5288-30-0x0000000000400000-0x0000000000C36000-memory.dmp
memory/5288-50-0x0000000140000000-0x00000001400C0000-memory.dmp