Overview

overview

10

Static

static

3

2026-07-18...op.exe

windows10-2004-x64

10

2026-07-18...op.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-07-18_86f5bf832b7ca76c4ca94eccfb1e1d9c_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
  • Size 368KB
  • Sample260718-h5msvsbz6p
  • SHA256 5716236d34c9c18b58f4ef921e791a2091f5dcaaba7f6ba7dbdf12dcd96b2bb5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
vidarf9325fe4601299903acce7a1c0c8eb2bdiscoverystealer

Malware Config

Extracted

Family

  • vidar

Version

  • 5.8

Botnet

  • f9325fe4601299903acce7a1c0c8eb2b

C2

  • https://steamcommunity.com/profiles/76561199555780195

  • https://t.me/solonichat

Attributes
  • profile_id_v2

    f9325fe4601299903acce7a1c0c8eb2b

  • user_agent

    Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.0.0 Safari/537.36

Targets

    • Target
      2026-07-18_86f5bf832b7ca76c4ca94eccfb1e1d9c_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
    • Size 368KB
    • SHA256 5716236d34c9c18b58f4ef921e791a2091f5dcaaba7f6ba7dbdf12dcd96b2bb5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    f9325fe4601299903acce7a1c0c8eb2bdiscoveryvidarstealer

    • Family: Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks