Analysis
-
max time kernel
149s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
14-04-2023 06:59
General
-
Target
9f4ce33d97541861fc70b51c66250809.exe
-
Size
368KB
-
MD5
9f4ce33d97541861fc70b51c66250809
-
SHA1
6ada4f4cb0fc32e21a1b67c49261312fd5c00511
-
SHA256
4598f17c42e3fa2259e57d1e4732ad6847a6b3469114a1d37112a8fca6ba748b
-
SHA512
755bf07375451b30b5458d8dbe045acbcfe2ea03a8573deb625de5b4aac51a0a13ef64a82b5919219d750b53d998bc17401755b6f1da98a2396d0ffb99c2b008
-
SSDEEP
6144:UIbeYKQ5AiNfZeSxNZtH07n2r2ICUXpjizWu9re5GOC5:UKeY3HNBNjINwwC2iC5
Score
10/10
Malware Config
Extracted
Family
vidar
Version
3.4
Botnet
e749025c61b2caca10aa829a9e1a65a1
C2
https://steamcommunity.com/profiles/76561199494593681
https://t.me/auftriebs
Attributes
-
profile_id_v2
e749025c61b2caca10aa829a9e1a65a1
-
user_agent
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0
Signatures
-
Vidar
Vidar is an infostealer based on Arkei stealer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\9f4ce33d97541861fc70b51c66250809.exe"C:\Users\Admin\AppData\Local\Temp\9f4ce33d97541861fc70b51c66250809.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
348KB
-
Filesize
808KB
-
Filesize
808KB
-
Filesize
808KB
-
Filesize
808KB
-
Filesize
808KB