vidar | d34b14b9abbc0dcb5fb4ca9475699a0c39f90351793dbcede2993ad633817a75 | Triage

Sharing

General

Target

4844e3252cea0bexeexeexeex.exe
Size

335KB
Sample

230707-pkjn2aaa6v
MD5

4844e3252cea0bbad442b72e8ba34b7b
SHA1

d9335d4006028e7e48b5ecfbad5eb8917ec630a7
SHA256

d34b14b9abbc0dcb5fb4ca9475699a0c39f90351793dbcede2993ad633817a75
SHA512

4280ae1ba51f3d2fd2d58970352143cde9b7a57f02a7ea753f224c4fa34bd7aa16312e28d92740d1e3a53f6fe16c6e227373d6f20744b0e3a077c9898c67ed04
SSDEEP

6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTS10qhh43Ajrt:qtUGfVwUFzRG6EQ0POfiTTa0qSAjrt

Score

10^/10

vidar a81bcf59d85e6e13257840e65b9d1da8

Malware Config

Extracted

Family

vidar

Version

4.2

Botnet

a81bcf59d85e6e13257840e65b9d1da8

C2

https://steamcommunity.com/profiles/76561199511129510

https://t.me/rechnungsbetrag

Attributes

profile_id_v2
a81bcf59d85e6e13257840e65b9d1da8
user_agent
Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.38 Safari/537.36 Brave/75

Targets

- Target
  
  4844e3252cea0bexeexeexeex.exe
- Size
  
  335KB
- MD5
  
  4844e3252cea0bbad442b72e8ba34b7b
- SHA1
  
  d9335d4006028e7e48b5ecfbad5eb8917ec630a7
- SHA256
  
  d34b14b9abbc0dcb5fb4ca9475699a0c39f90351793dbcede2993ad633817a75
- SHA512
  
  4280ae1ba51f3d2fd2d58970352143cde9b7a57f02a7ea753f224c4fa34bd7aa16312e28d92740d1e3a53f6fe16c6e227373d6f20744b0e3a077c9898c67ed04
- SSDEEP
  
  6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTS10qhh43Ajrt:qtUGfVwUFzRG6EQ0POfiTTa0qSAjrt
Score

5^/10
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

a81bcf59d85e6e13257840e65b9d1da8vidar

behavioral1

behavioral2