General

  • Target
    AthenaUI_v9.79.594.exe
  • Size 89.1MB
  • Sample261012-tfcgdaea79
  • SHA256 c319f7af3ca609831474c603f224f5c0c38612bf5e99b5a5be7ed7b29fa2b26a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • vidar

Version
  • 3.8

Botnet
  • 0a9d3f5b5c13d8baec008af3c894458c

C2
  • https://172.235.183.120

  • https://telegram.me/scii0n

  • https://steamcommunity.com/profiles/76561198628246386

Attributes
  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/150.0.0.0 YaBrowser/26.8.0.0

Targets

    • Target
      AthenaUI_v9.79.594.exe
    • Size 89.1MB
    • SHA256 c319f7af3ca609831474c603f224f5c0c38612bf5e99b5a5be7ed7b29fa2b26a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Vidar

      Vidar is an infostealer based on Arkei stealer.

MITRE ATT&CK Enterprise v16

Tasks