Analysis
- max time kernel
150s - max time network
156s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
16/08/2026, 17:08
General
- Target 45b13eac0b75706b474118f69b6fef22eaa90521e70dbcd823dd5e67b1e4a1aa.bin.exe
- Size 3.4MB
- Sample260816-vnvhlasera
- SHA256 45b13eac0b75706b474118f69b6fef22eaa90521e70dbcd823dd5e67b1e4a1aa
Malware Config
Extracted
-
vidar
-
2.5
-
2434413bf6a453f893fb2861b1c9d5ec
-
https://kwt.tb88roki.top
-
https://telegram.me/r7t3at
-
https://steamcommunity.com/profiles/76561198674661449
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Safari/537.36 Edg/147.0.0.0
Signatures
- Family: Vidar
Vidar is an infostealer based on Arkei stealer.
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\45b13eac0b75706b474118f69b6fef22eaa90521e70dbcd823dd5e67b1e4a1aa.bin.exe"C:\Users\Admin\AppData\Local\Temp\45b13eac0b75706b474118f69b6fef22eaa90521e70dbcd823dd5e67b1e4a1aa.bin.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5280-0-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-1-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-2-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-3-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-4-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-5-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-6-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-7-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-8-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-9-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-10-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-11-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-12-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-13-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-14-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-15-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-16-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-17-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-18-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-19-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-20-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-21-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-22-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-23-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-25-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-24-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-26-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-27-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-28-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-29-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-30-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-31-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-32-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-33-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-34-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-35-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-36-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-37-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-38-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-39-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-40-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-41-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-42-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-43-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-44-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-45-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-46-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-47-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-48-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-49-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-50-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-51-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-52-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-53-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-54-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-55-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-56-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-57-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-58-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-59-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-60-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-61-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-62-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-63-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-64-0x0000000360000000-0x0000000360228000-memory.dmp
memory/5280-65-0x0000000360000000-0x0000000360228000-memory.dmp