Overview

overview

10

Static

static

10

2026-09-18...ia.exe

windows10-2004-x64

10

2026-09-18...ia.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-09-18_0f0813c1e7e1787d105f8904243200f6_elex_mafia
  • Size 630KB
  • Sample260918-x2pklscd66
  • SHA256 d0577b1ed38ab7fe3ba4594c58232fd3f413232f6a40e23b86dfc3eeb39c5cd8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
vidar1discoverystealer

Malware Config

Extracted

Family

  • vidar

Version

  • 53.2

Botnet

  • 1

C2

  • https://t.me/tgch_hijuly

  • https://c.im/@olegf9844h

Attributes
  • profile_id

    1

Targets

    • Target
      2026-09-18_0f0813c1e7e1787d105f8904243200f6_elex_mafia
    • Size 630KB
    • SHA256 d0577b1ed38ab7fe3ba4594c58232fd3f413232f6a40e23b86dfc3eeb39c5cd8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryvidarstealer

    • Family: Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Detects executables containing SQL queries to confidential data stores. Observed in infostealers

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks