Overview

overview

10

Static

static

2445015a38...58.exe

windows7_x64

10

2445015a38...58.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    118s
  • max time network
    157s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    15-02-2022 14:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2445015a38add6e9f4e917b8057e57cd59c5361aed5ddec6b6f3ac64c0cda258.exe

  • Size

    708KB

  • MD5

    9c18b1d03dfef684145efdaf64ef2c25

  • SHA1

    8a038d5a59ec994afdb558658c5ee1f92d690288

  • SHA256

    2445015a38add6e9f4e917b8057e57cd59c5361aed5ddec6b6f3ac64c0cda258

  • SHA512

    defec70294504707ccc36317d5875e6462e1db0cb75b9bbd68595755aadac41daac416ab4a49abee6ef3a06a026e48d03fd8ff745d96500cb5674c70d751d04f

Score
10/10
vidar937stealer

Malware Config

Extracted

Family

vidar

Version

48.6

Botnet

937

C2

https://mastodon.online/@valhalla

https://koyu.space/@valhalla
Attributes
  • profile_id

    937

Signatures

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar
  • Vidar Stealer 2 IoCs
    stealer

Processes

  • C:\Users\Admin\AppData\Local\Temp\2445015a38add6e9f4e917b8057e57cd59c5361aed5ddec6b6f3ac64c0cda258.exe
    "C:\Users\Admin\AppData\Local\Temp\2445015a38add6e9f4e917b8057e57cd59c5361aed5ddec6b6f3ac64c0cda258.exe"
    1⤵
      PID:1552

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1552-55-0x000000000221D000-0x000000000229A000-memory.dmp
      Filesize

      500KB

      Download
    • memory/1552-56-0x0000000075B11000-0x0000000075B13000-memory.dmp
      Filesize

      8KB

      Download
    • memory/1552-57-0x000000000221D000-0x000000000229A000-memory.dmp
      Filesize

      500KB

      Download
    • memory/1552-58-0x0000000000220000-0x00000000002F5000-memory.dmp
      Filesize

      852KB

      Download
    • memory/1552-59-0x0000000000400000-0x00000000004D8000-memory.dmp
      Filesize

      864KB

      Download