Overview

overview

10

Static

static

555.exe

windows7_x64

10

555.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    555.exe
  • Size 1.2MB
  • Sample220322-2q5jxabdd9
  • SHA256 b4c9aadd18c1b6f613bf9d6db71dcc010bbdfe8b770b4084eeb7d5c77d95f180
  • MD5 SHA1 SHA512
Score
10/10
vidar288spywarestealer

Malware Config

Extracted

Family

  • vidar

Version

  • 12.8

Botnet

  • 288

C2

  • http://dersed.com/

Attributes
  • profile_id

    288

Targets

    • Target
      555.exe
    • Size 1.2MB
    • SHA256 b4c9aadd18c1b6f613bf9d6db71dcc010bbdfe8b770b4084eeb7d5c77d95f180
    • MD5 SHA1 SHA512
    Score
    10/10
    vidar288spywarestealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar Stealer

      stealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks