Overview

overview

10

Static

static

eufive_202...41.exe

windows7_x64

10

eufive_202...41.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eufive_20211107-195241

  • Size

    726KB

  • Sample

    211107-1h9cfsbad8

  • MD5

    9c34c9d1794c171aa684d36922372938

  • SHA1

    af5531df5bf9d8595362faf1adfed5ef7e0d1eb7

  • SHA256

    48b4ef89802d527d97224135d03dc0080d24f16c89de5aef5f85067f5a61017a

  • SHA512

    5d5260536cd2a70f536456413cac1392b916da502f2c83cde31f663b979976ea1a4c85dfb7511cb148e4bb86ac4c6a120d367f3df43c9a47a9e08fde32c35311

Score
10/10
vidar824stealer

Malware Config

Extracted

Family

vidar

Version

47.9

Botnet

824

Attributes
  • profile_id

    824

Targets

    • Target

      eufive_20211107-195241

    • Size

      726KB

    • MD5

      9c34c9d1794c171aa684d36922372938

    • SHA1

      af5531df5bf9d8595362faf1adfed5ef7e0d1eb7

    • SHA256

      48b4ef89802d527d97224135d03dc0080d24f16c89de5aef5f85067f5a61017a

    • SHA512

      5d5260536cd2a70f536456413cac1392b916da502f2c83cde31f663b979976ea1a4c85dfb7511cb148e4bb86ac4c6a120d367f3df43c9a47a9e08fde32c35311

    Score
    10/10
    vidar824stealer

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar Stealer

      stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks