Overview

overview

10

Static

static

78109955.exe

windows7_x64

10

78109955.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    4294206s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20220310-en
  • submitted
    23-03-2022 16:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    78109955.exe

  • Size

    723KB

  • MD5

    79b43c60aa0d0a3ee3ab1dc0f035149f

  • SHA1

    bcbfa5f42aa22ebc005719c44d7695760a3b37e9

  • SHA256

    600cccc41326dd72d64618a05e7f3d8cbaa533af4975813e0803b84ee3dd11d2

  • SHA512

    59c0b82a38255dcea9dca4ac8ecb1613367da1d6a45dc38407970992fd817e7f4de1e7f7a24f41d170804d9bb48ca0cba47c485cd3900e3d264d294726e74ada

Score
10/10
vidar565stealer

Malware Config

Extracted

Family

vidar

Version

50.1

Botnet

565

C2

https://mastodon.online/@k1llerniax

https://koyu.space/@k1llerni2x
Attributes
  • profile_id

    565

Signatures

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar
  • Vidar Stealer 2 IoCs
    stealer

Processes

  • C:\Users\Admin\AppData\Local\Temp\78109955.exe
    "C:\Users\Admin\AppData\Local\Temp\78109955.exe"
    1⤵
      PID:1396

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1396-54-0x00000000002CD000-0x0000000000339000-memory.dmp
      Filesize

      432KB

      Download
    • memory/1396-55-0x00000000760A1000-0x00000000760A3000-memory.dmp
      Filesize

      8KB

      Download
    • memory/1396-56-0x00000000002CD000-0x0000000000339000-memory.dmp
      Filesize

      432KB

      Download
    • memory/1396-57-0x0000000004310000-0x00000000043BB000-memory.dmp
      Filesize

      684KB

      Download
    • memory/1396-58-0x0000000000400000-0x0000000002B7D000-memory.dmp
      Filesize

      39.5MB

      Download