Overview

overview

10

Static

static

10

1272-60-0x...ry.exe

windows7-x64

10

1272-60-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1272-60-0x0000000000EE0000-0x00000000014C6000-memory.dmp

  • Size

    5.9MB

  • Sample

    221115-xgpd4sbb6w

  • MD5

    2fe98274673cc5d9472ac599d92b4e58

  • SHA1

    0adb20779f81412176d371efcf956c0a14b4de02

  • SHA256

    f04358cde5e99e01279dd041a2e8f4fb1dcbd5ae001a63a59bc52f40dc6ae769

  • SHA512

    f6bc7ba3d1c5eaaff96ec8026976498aad58c1192d2bd92d1c2fa9df843695a88d19de4a1e94717115d45a4dc60ae3eabee992109c001efaa7d7f74cfb05371e

  • SSDEEP

    98304:BME/2zDV2jBp0vv35MT48HkA2dJWtys3C9:vCVc30viJqJ44

Score
10/10
vidar1679stealerthemida

Malware Config

Extracted

Family

vidar

Version

55.7

Botnet

1679

C2

https://t.me/deadftx

https://www.ultimate-guitar.com/u/smbfupkuhrgc1
Attributes
  • profile_id

    1679

Targets

    • Target

      1272-60-0x0000000000EE0000-0x00000000014C6000-memory.dmp

    • Size

      5.9MB

    • MD5

      2fe98274673cc5d9472ac599d92b4e58

    • SHA1

      0adb20779f81412176d371efcf956c0a14b4de02

    • SHA256

      f04358cde5e99e01279dd041a2e8f4fb1dcbd5ae001a63a59bc52f40dc6ae769

    • SHA512

      f6bc7ba3d1c5eaaff96ec8026976498aad58c1192d2bd92d1c2fa9df843695a88d19de4a1e94717115d45a4dc60ae3eabee992109c001efaa7d7f74cfb05371e

    • SSDEEP

      98304:BME/2zDV2jBp0vv35MT48HkA2dJWtys3C9:vCVc30viJqJ44

    Score
    10/10
    vidarstealerthemida

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks