Overview

overview

10

Static

static

accb11ccb1...1b.exe

windows7-x64

10

accb11ccb1...1b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    accb11ccb1692a5e771981a5659d68c8adc3e225f476ca3387b57d818381ed1b

  • Size

    695KB

  • Sample

    221128-kf81xaaa82

  • MD5

    7b1ff60b0ba26d132c74535a641a0e02

  • SHA1

    0180b514cb32ae43fcefda0863a96f1f79a51b33

  • SHA256

    accb11ccb1692a5e771981a5659d68c8adc3e225f476ca3387b57d818381ed1b

  • SHA512

    3dbe1669e6f0f2c498a4276ef4d31ccf872bc2fcd4f1a1c282e6caf48d6cbd12d8685a05a9f43e3eef9fff8ba143ad1b14227f6c1a4a4263e242b5f8716a1034

  • SSDEEP

    12288:fT89bQq29htXti39Q434XfBpxbgZNg2VymI8WVpexRL2tEXIxD:fA5ib9G9T34XJjbgHVXWVg0tv

Score
10/10
vidar933stealer

Malware Config

Extracted

Family

vidar

Version

41.5

Botnet

933

C2

https://mas.to/@xeroxxx

Attributes
  • profile_id

    933

Targets

    • Target

      accb11ccb1692a5e771981a5659d68c8adc3e225f476ca3387b57d818381ed1b

    • Size

      695KB

    • MD5

      7b1ff60b0ba26d132c74535a641a0e02

    • SHA1

      0180b514cb32ae43fcefda0863a96f1f79a51b33

    • SHA256

      accb11ccb1692a5e771981a5659d68c8adc3e225f476ca3387b57d818381ed1b

    • SHA512

      3dbe1669e6f0f2c498a4276ef4d31ccf872bc2fcd4f1a1c282e6caf48d6cbd12d8685a05a9f43e3eef9fff8ba143ad1b14227f6c1a4a4263e242b5f8716a1034

    • SSDEEP

      12288:fT89bQq29htXti39Q434XfBpxbgZNg2VymI8WVpexRL2tEXIxD:fA5ib9G9T34XJjbgHVXWVg0tv

    Score
    10/10
    vidar933stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks