Analysis
-
max time kernel
49s -
max time network
52s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
19-05-2022 02:23
Static task
static1
Behavioral task
behavioral1
Sample
vid.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
vid.exe
-
Size
447KB
-
MD5
a5ee4237940e64d6edc5585d98784065
-
SHA1
81145ebbb522f045f400582f360de32aa2bbad0d
-
SHA256
2144e7805a7d52125ebf336d6632b6ea7d640e2b442eae797bd0048c220347ba
-
SHA512
6de6b191413a0ef59fcaf521e5f435d14eccc0f9fee9dd6e28eea2af591075b8e132b4dc7ca94fa1a0da03faa4e42d76011dc8511915646a9d79ea898fde3b80
Malware Config
Extracted
Family
vidar
Version
52.2
Botnet
1376
C2
https://t.me/netflixaccsfree
https://mastodon.social/@ronxik12
Attributes
-
profile_id
1376
Signatures
-
Vidar Stealer 2 IoCs
Processes:
resource yara_rule behavioral1/memory/1988-55-0x0000000000220000-0x000000000026E000-memory.dmp family_vidar behavioral1/memory/1988-56-0x0000000000400000-0x00000000004B1000-memory.dmp family_vidar
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1988-54-0x000000000067A000-0x00000000006A7000-memory.dmpFilesize
180KB
-
memory/1988-55-0x0000000000220000-0x000000000026E000-memory.dmpFilesize
312KB
-
memory/1988-56-0x0000000000400000-0x00000000004B1000-memory.dmpFilesize
708KB
-
memory/1988-57-0x0000000075371000-0x0000000075373000-memory.dmpFilesize
8KB