Overview

overview

10

Static

static

20da8e6d07...a8.exe

windows7_x64

10

20da8e6d07...a8.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20da8e6d07f8cf4dcc402d3ae0eca27a6a1f304763663bcab6be8325868689a8

  • Size

    684KB

  • Sample

    220612-mgzjzahaam

  • MD5

    f7e75b9b3ac2bce48e23d08c7a5eae7a

  • SHA1

    f1c9c6466f2996ce71a09c7da8f5f38cb49c7e56

  • SHA256

    20da8e6d07f8cf4dcc402d3ae0eca27a6a1f304763663bcab6be8325868689a8

  • SHA512

    94e36da72d408eacfb8b5feb0c5f3ee213cd614b90d216d4582fe3b9213634838773ef8439bfedd6bdb0bdbee7597fd5b6812d75bd858d904d3b304df989cbb6

Score
10/10
vidar937stealer

Malware Config

Extracted

Family

vidar

Version

41.4

Botnet

937

C2

https://mas.to/@sslam

Attributes
  • profile_id

    937

Targets

    • Target

      20da8e6d07f8cf4dcc402d3ae0eca27a6a1f304763663bcab6be8325868689a8

    • Size

      684KB

    • MD5

      f7e75b9b3ac2bce48e23d08c7a5eae7a

    • SHA1

      f1c9c6466f2996ce71a09c7da8f5f38cb49c7e56

    • SHA256

      20da8e6d07f8cf4dcc402d3ae0eca27a6a1f304763663bcab6be8325868689a8

    • SHA512

      94e36da72d408eacfb8b5feb0c5f3ee213cd614b90d216d4582fe3b9213634838773ef8439bfedd6bdb0bdbee7597fd5b6812d75bd858d904d3b304df989cbb6

    Score
    10/10
    vidar937stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks