Overview

overview

10

Static

static

10

1304-55-0x...ry.exe

windows7-x64

1

1304-55-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1304-55-0x0000000000400000-0x0000000000520000-memory.dmp

  • Size

    1.1MB

  • Sample

    230601-q77vtaeh7x

  • MD5

    b5bd18f88703bd4ab2118ebe79c599e4

  • SHA1

    b0d67ef1d4e2f3c79ebe62695cf1a58023bcb580

  • SHA256

    e15c193bf927224141b14a95ef30b8ba7b5a0055e39bec478dac0f75e1fad650

  • SHA512

    bf03915dd501b18bb664f4cb45ccef3ebee14e9ecc8c0936a44b9fb219fc6d488644637a9338cd6d80530a1dfd3e2b51c180d358466ec4b1595fbcfb66dbc94b

  • SSDEEP

    12288:n0Ht9Tp+l0EqE1can/HVk0bXr5OjRPXSvvhkpTPX3/p:k7TEKScWy0bXrwjR/ukpTPR

Score
10/10
vidar237stealer

Malware Config

Extracted

Family

vidar

Version

9

Botnet

237

C2

http://hotticketsale.com/

Attributes
  • profile_id

    237

Targets

    • Target

      1304-55-0x0000000000400000-0x0000000000520000-memory.dmp

    • Size

      1.1MB

    • MD5

      b5bd18f88703bd4ab2118ebe79c599e4

    • SHA1

      b0d67ef1d4e2f3c79ebe62695cf1a58023bcb580

    • SHA256

      e15c193bf927224141b14a95ef30b8ba7b5a0055e39bec478dac0f75e1fad650

    • SHA512

      bf03915dd501b18bb664f4cb45ccef3ebee14e9ecc8c0936a44b9fb219fc6d488644637a9338cd6d80530a1dfd3e2b51c180d358466ec4b1595fbcfb66dbc94b

    • SSDEEP

      12288:n0Ht9Tp+l0EqE1can/HVk0bXr5OjRPXSvvhkpTPX3/p:k7TEKScWy0bXrwjR/ukpTPR

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks