Analysis
-
max time kernel
150s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
27-04-2023 00:04
General
-
Target
setup.exe
-
Size
326KB
-
MD5
01a752ac625937eab82b167d79e85126
-
SHA1
1ec10d6c0476f7c3d2d02fb4f9836709f16c598e
-
SHA256
7564e44c0b07a0f161c5a245ba8f2029ea70a297a5f9944c4c786a75f1e8524a
-
SHA512
8ad9507ccc2e4e7e3eb5df923751c72162506b2fcb66bb119e9fd4548be77fa8a1fcde021d5d4777e889c353e6421191d1cb3148f7b3171889a415e22869f21d
-
SSDEEP
6144:1O2nZ+uLCWAhFAMFo/cMt0/eoaeh3funfdfqxVs:0a4uLbAMp5iKeUfiVs
Score
10/10
Malware Config
Extracted
Family
vidar
Version
3.5
Botnet
2234cb18bdcd93ea6f4e5f1473025a81
C2
https://steamcommunity.com/profiles/76561199497218285
https://t.me/tg_duckworld
Attributes
-
profile_id_v2
2234cb18bdcd93ea6f4e5f1473025a81
-
user_agent
Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36 Vivaldi/3.7
Signatures
-
Vidar
Vidar is an infostealer based on Arkei stealer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup.exe"C:\Users\Admin\AppData\Local\Temp\setup.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
348KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB