Analysis
- max time kernel
149s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 12:29
General
- Target jaffacakes118_8f384fc6860325ac223aa11b24b2989a72f2e85fbeda3cbcad4dfbc4cfa28c9b.exe
- Size 167KB
- Sample260910-ppa8fswyew
- SHA256 8f384fc6860325ac223aa11b24b2989a72f2e85fbeda3cbcad4dfbc4cfa28c9b
Malware Config
Extracted
-
vidar
-
17.1
-
9da477fb271985c522ecf30c922d63ab
-
https://telegram.me/gal17d
-
https://steamcommunity.com/profiles/76561198759765485
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:148.0) Gecko/20100101 Firefox/148.0
Signatures
- Family: Vidar
Vidar is an infostealer based on Arkei stealer.
- Detects Vidar Stealer 11 IoCs
- UPX packed file 12 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_8f384fc6860325ac223aa11b24b2989a72f2e85fbeda3cbcad4dfbc4cfa28c9b.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_8f384fc6860325ac223aa11b24b2989a72f2e85fbeda3cbcad4dfbc4cfa28c9b.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4416-0-0x00007FF656C00000-0x00007FF656CB3000-memory.dmp
memory/4416-16-0x00007FF656C00000-0x00007FF656CB3000-memory.dmp
memory/4416-17-0x00007FF656C00000-0x00007FF656CB3000-memory.dmp
memory/4416-18-0x00007FF656C00000-0x00007FF656CB3000-memory.dmp
memory/4416-20-0x00007FF656C00000-0x00007FF656CB3000-memory.dmp
memory/4416-21-0x00007FF656C00000-0x00007FF656CB3000-memory.dmp
memory/4416-22-0x00007FF656C00000-0x00007FF656CB3000-memory.dmp
memory/4416-23-0x00007FF656C00000-0x00007FF656CB3000-memory.dmp
memory/4416-24-0x00007FF656C00000-0x00007FF656CB3000-memory.dmp
memory/4416-25-0x00007FF656C00000-0x00007FF656CB3000-memory.dmp
memory/4416-28-0x00007FF656C00000-0x00007FF656CB3000-memory.dmp
memory/4416-29-0x00007FF656C00000-0x00007FF656CB3000-memory.dmp