Overview

overview

10

Static

static

5712d1bb9d...35.exe

windows7_x64

10

5712d1bb9d...35.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    5712d1bb9d35a5885dd4bdc27a08f335.exe
  • Size 1.5MB
  • Sample210921-x6m8caadf6
  • SHA256 36d41de43aebe714bd9271beacc32e16b81143dcc6e4db40aaf305bb3a5b6517
  • MD5 SHA1 SHA512
Score
10/10
vidar1013stealer

Malware Config

Extracted

Family

  • vidar

Version

  • 40.8

Botnet

  • 1013

C2

  • https://pavlovoler.tumblr.com/

Attributes
  • profile_id

    1013

Targets

    • Target
      5712d1bb9d35a5885dd4bdc27a08f335.exe
    • Size 1.5MB
    • SHA256 36d41de43aebe714bd9271beacc32e16b81143dcc6e4db40aaf305bb3a5b6517
    • MD5 SHA1 SHA512
    Score
    10/10
    vidar1013stealer

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar Stealer

      stealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks