vidar | 5df380b97c8d4bbae30530c1be1fa0807dff4adf35172396261f8d99ea0dd80e | Triage

Sharing

General

Target

5df380b97c8d4bbae30530c1be1fa0807dff4adf35172396261f8d99ea0dd80e
Size

557KB
Sample

220724-z4ybmsgff8
MD5

bf5f23efae9a37962d68f0b7f1b4a0f1
SHA1

56a5e3c0b6857e0891b49a1d7a5547056429a88b
SHA256

5df380b97c8d4bbae30530c1be1fa0807dff4adf35172396261f8d99ea0dd80e
SHA512

56f50a2dee97563f1486b8045078b45a9689ffb1e2df201afcc76b9eac6aa88becdb01675236185f1934b42f04d05d9c744ecb129eea686ca7e7f4a26fad4377

Score

10^/10

vidar 93 stealer

Malware Config

Extracted

Family

vidar

Version

7.7

Botnet

93

C2

http://search.ac.ug/

Attributes

profile_id
93

Targets

- Target
  
  5df380b97c8d4bbae30530c1be1fa0807dff4adf35172396261f8d99ea0dd80e
- Size
  
  557KB
- MD5
  
  bf5f23efae9a37962d68f0b7f1b4a0f1
- SHA1
  
  56a5e3c0b6857e0891b49a1d7a5547056429a88b
- SHA256
  
  5df380b97c8d4bbae30530c1be1fa0807dff4adf35172396261f8d99ea0dd80e
- SHA512
  
  56f50a2dee97563f1486b8045078b45a9689ffb1e2df201afcc76b9eac6aa88becdb01675236185f1934b42f04d05d9c744ecb129eea686ca7e7f4a26fad4377
Score

6^/10
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2