vidar | 110644f29505c86bda4847b51346f5c628dfabd3453115f8eac5508c87e494a0

General

Target
2026-08-23_9ac90823e198acbd3a3a61ba52e43ef6_cobalt-strike_coinminer_elex_frostygoop_glassworm_hive_poet-rat_salatstealer_sliver_snatch
Size 9.6MB
Sample260825-241swabb54
SHA256 110644f29505c86bda4847b51346f5c628dfabd3453115f8eac5508c87e494a0
MD5 9ac90823e198acbd3a3a61ba52e43ef6
SHA1 5c97f4e4b3d05cfbf92e6407951a91777eea1d73
SHA512 47770e6e91fb12bcad8501f5fb2126b8513ac2c7b5ae573271c190a923cf3a7edb8e84172439bba34db9ec5de2e2f714617df7656d25bb7b0fa609f67f2d9f1c
SSDEEP 98304:cDFDHhzdml/gKm01luYGWBg3LZQ2oPc8sT2YzlK:+F7h6ue+7Z5oPc8sT2Yzs
TLSH
T123A64AA1F9DF04F1DA03547004AB623F17345E098B29DBDBDA207F6AF837AE11936259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

vidar

Botnet

674add1b5caf8c3b0ffc81978f9c09d7

C2

https://t.me/cruadsummar
https://t.me/pullmeundervosk2

Extracted

Family

vidar

C2

https://t.me/cruadsummar
https://t.me/pullmeundervosk2

Targets

- Target
  2026-08-23_9ac90823e198acbd3a3a61ba52e43ef6_cobalt-strike_coinminer_elex_frostygoop_glassworm_hive_poet-rat_salatstealer_sliver_snatch
- Size 9.6MB
- SHA256 110644f29505c86bda4847b51346f5c628dfabd3453115f8eac5508c87e494a0
- MD5 9ac90823e198acbd3a3a61ba52e43ef6
- SHA1 5c97f4e4b3d05cfbf92e6407951a91777eea1d73
- SHA512 47770e6e91fb12bcad8501f5fb2126b8513ac2c7b5ae573271c190a923cf3a7edb8e84172439bba34db9ec5de2e2f714617df7656d25bb7b0fa609f67f2d9f1c
- SSDEEP 98304:cDFDHhzdml/gKm01luYGWBg3LZQ2oPc8sT2YzlK:+F7h6ue+7Z5oPc8sT2Yzs
- TLSH
  T123A64AA1F9DF04F1DA03547004AB623F17345E098B29DBDBDA207F6AF837AE11936259
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

674add1b5caf8c3b0ffc81978f9c09d7 discovery vidar stealer
- Detect Vidar Stealer
  stealer
- Family: Vidar
  Vidar is an infostealer based on Arkei stealer.
  stealer vidar
- Detects Windows executables referencing non-Windows User-Agents
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Extracted

Targets

Detect Vidar Stealer

Family: Vidar

Detects Windows executables referencing non-Windows User-Agents

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2