Analysis
-
max time kernel
146s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
27-04-2023 00:13
General
-
Target
setup.exe
-
Size
326KB
-
MD5
564af6cc967eccd7e407a7e267fc3d37
-
SHA1
1374638b9443a2f229e20815b425e21c65491b2f
-
SHA256
9b18f5731f338a90ca3a226572e21c2c958c345d6adfa40f8b012a79f412dae5
-
SHA512
1331491f8bfedaff78be66677562a59ab2cc10e63694e136dac0e25a08fcf3500420ce237edff477629e64b21a092c9fa8b7870f1a0f1987911179c2372068a8
-
SSDEEP
6144:8rdl4ZxeLf5Zsnr9pe2JQSG41qXnDGd53mYpG:8rdl4ZILBGnpo1d6qXDw3
Score
10/10
Malware Config
Extracted
Family
vidar
Version
3.5
Botnet
2234cb18bdcd93ea6f4e5f1473025a81
C2
https://steamcommunity.com/profiles/76561199497218285
https://t.me/tg_duckworld
Attributes
-
profile_id_v2
2234cb18bdcd93ea6f4e5f1473025a81
-
user_agent
Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36 Vivaldi/3.7
Signatures
-
Vidar
Vidar is an infostealer based on Arkei stealer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup.exe"C:\Users\Admin\AppData\Local\Temp\setup.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
348KB
-
Filesize
39.7MB
-
Filesize
39.7MB
-
Filesize
39.7MB
-
Filesize
39.7MB
-
Filesize
39.7MB
-
Filesize
39.7MB
-
Filesize
39.7MB