Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
27-04-2023 00:07
General
-
Target
setup.exe
-
Size
326KB
-
MD5
b711a60cd0a867a1fbe256eaa0e4703a
-
SHA1
c2e34be818fcaf20e64218128b445374f49008bc
-
SHA256
005dce2ddcdfce4418c7782afe3d59d6ee9cb8a3f0a9f303ebf92b60151aa55e
-
SHA512
7835a457b6c78130ebea30a60ec2a2bf6ed19858d04c000bd9cd57ae4d9b293bd172d3f27d89f6c5f9f3f34212b8bfb5282512d4d301313211329a8f88957e4c
-
SSDEEP
6144:d2H51V45ltdhwjbiC7VtvqjSbxgMlarL5d:MH5ItKjDyj2ixf5d
Score
10/10
Malware Config
Extracted
Family
vidar
Version
3.5
Botnet
2234cb18bdcd93ea6f4e5f1473025a81
C2
https://steamcommunity.com/profiles/76561199497218285
https://t.me/tg_duckworld
Attributes
-
profile_id_v2
2234cb18bdcd93ea6f4e5f1473025a81
-
user_agent
Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36 Vivaldi/3.7
Signatures
-
Vidar
Vidar is an infostealer based on Arkei stealer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup.exe"C:\Users\Admin\AppData\Local\Temp\setup.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
348KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB