Analysis
- max time kernel
298s - max time network
255s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
- submitted
14/08/2026, 00:55
General
- Target Quantum V4.exe
- Size 3.2MB
- Sample260814-a95v8ssaqa
- SHA256 2546b46667317374ac08fb17dc2bcbeda26c3aa6feee012cba37b8f90ad775ff
Score
10/10
Malware Config
Extracted
Family
-
vidar
Version
-
2.9
Botnet
-
5fdb6df778631818165110294c620890
C2
-
https://65.109.35.163
-
https://telegram.me/j0tt0s
-
https://steamcommunity.com/profiles/76561198660175584
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Safari/537.36 Edg/144.0.0.0
Signatures
- Family: Vidar
Vidar is an infostealer based on Arkei stealer.
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Quantum V4.exe"C:\Users\Admin\AppData\Local\Temp\Quantum V4.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5188-0-0x0000000220000000-0x000000022025A000-memory.dmp
memory/5188-1-0x0000000220000000-0x000000022025A000-memory.dmp
memory/5188-2-0x0000000220000000-0x000000022025A000-memory.dmp
memory/5188-3-0x0000000220000000-0x000000022025A000-memory.dmp
memory/5188-4-0x0000000220000000-0x000000022025A000-memory.dmp