Resubmissions

06/07/2026, 12:49

260706-p2kmnabt2r10

15/06/2026, 16:58

260615-vgvj1sds6z10

General

  • Target
    _034b06fb37c5613552aea6af542a5856668d22f4026f535496dcaf7e7b56c3e4.exe
  • Size 2.3MB
  • Sample260706-p2kmnabt2r
  • SHA256 034b06fb37c5613552aea6af542a5856668d22f4026f535496dcaf7e7b56c3e4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • vidar

Version
  • 2.1

Botnet
  • 8778bb78a64d4c74c3d1d849856a054e

C2
  • https://telegram.me/turb00m

  • https://steamcommunity.com/profiles/76561198689449626

Attributes
  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Safari/537.36 Edg/147.0.0.0

Targets

    • Target
      _034b06fb37c5613552aea6af542a5856668d22f4026f535496dcaf7e7b56c3e4.exe
    • Size 2.3MB
    • SHA256 034b06fb37c5613552aea6af542a5856668d22f4026f535496dcaf7e7b56c3e4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks