Analysis
- max time kernel
150s - max time network
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
11/09/2026, 18:20
General
- Target jaffacakes118_e00e0418c0b129b80ade87775df469b93b648ab6d350f7fe219026198a50eaeb.exe
- Size 4.0MB
- Sample260911-wy41fssvbt
- SHA256 e00e0418c0b129b80ade87775df469b93b648ab6d350f7fe219026198a50eaeb
Malware Config
Extracted
-
vidar
-
15.6
-
abd4e05d396ca9327c005130483ae000n
-
rif0lm
-
https://steamcommunity.com/profiles/76561198783900411
-
https://telegram.me/rif0lm
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:144.0) Gecko/20100101 Firefox/144.0
Signatures
- Family: Vidar
Vidar is an infostealer based on Arkei stealer.
- Detects Vidar Stealer 27 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_e00e0418c0b129b80ade87775df469b93b648ab6d350f7fe219026198a50eaeb.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_e00e0418c0b129b80ade87775df469b93b648ab6d350f7fe219026198a50eaeb.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2932-0-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-1-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-2-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-9-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-14-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-28-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-33-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-44-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-47-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-58-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-61-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-72-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-75-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-86-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-89-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-100-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-103-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-114-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-117-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-128-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-131-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-142-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-145-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-156-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-159-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-170-0x0000000140000000-0x0000000140073000-memory.dmp
memory/2932-173-0x0000000140000000-0x0000000140073000-memory.dmp