Overview

overview

10

Static

static

76241947.exe

windows7_x64

10

76241947.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    127s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220113
  • submitted
    23-03-2022 16:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    76241947.exe

  • Size

    694KB

  • MD5

    07558d3be84825a9b66ae9099d4d421b

  • SHA1

    077540d4babd49925c86fa51859f97522f2898ff

  • SHA256

    1b9753aaaf8e3e93be025dc3af836027c391516b1866e7064b6e0743ed72c651

  • SHA512

    65d4f00c4b47f2d2586c00b61fcbb1a44cce75574043a8ac1b0ffab7369a169c89bbb2c1f5b416239c0d7376cb1a02becabc497c37922964b833fccb59c44fbd

Score
10/10
vidar565stealer

Malware Config

Extracted

Family

vidar

Version

50.1

Botnet

565

C2

https://mastodon.online/@k1llerniax

https://koyu.space/@k1llerni2x
Attributes
  • profile_id

    565

Signatures

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar
  • Vidar Stealer 2 IoCs
    stealer

Processes

  • C:\Users\Admin\AppData\Local\Temp\76241947.exe
    "C:\Users\Admin\AppData\Local\Temp\76241947.exe"
    1⤵
      PID:2748

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2748-130-0x00000000009CD000-0x0000000000A38000-memory.dmp
      Filesize

      428KB

      Download
    • memory/2748-131-0x00000000009CD000-0x0000000000A38000-memory.dmp
      Filesize

      428KB

      Download
    • memory/2748-132-0x00000000024D0000-0x000000000257B000-memory.dmp
      Filesize

      684KB

      Download
    • memory/2748-133-0x0000000000400000-0x00000000008AD000-memory.dmp
      Filesize

      4.7MB

      Download