Overview

overview

10

Static

static

10

7915069b383d07_JC.exe

windows7-x64

1

7915069b383d07_JC.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7915069b383d07_JC.exe

  • Size

    338KB

  • Sample

    230716-vcwarafh45

  • MD5

    7915069b383d07cf16180aecc449848f

  • SHA1

    c753509b10419146f444b57c46033dc7f95d5a7f

  • SHA256

    29edb23e89b1512a4c044133cbafc863eb2710f8d8d3828ee0583cd1c528da60

  • SHA512

    0391402372bfe2fe1fbdb25ee641c2ea7b1badaa8b322fa005609ae34fb07f627e73fb0f90ec311a112eb13e71ac8a3e2a92e582d0880e2ca2f66785b02c2791

  • SSDEEP

    6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTV10qhhTcAjrt:qtUGfVwUFzRG6EQ0POfiTTL0qoAjrt

Score
10/10
vidara81bcf59d85e6e13257840e65b9d1da8

Malware Config

Extracted

Family

vidar

Version

4.2

Botnet

a81bcf59d85e6e13257840e65b9d1da8

C2

https://steamcommunity.com/profiles/76561199511129510

https://t.me/rechnungsbetrag
Attributes
  • profile_id_v2

    a81bcf59d85e6e13257840e65b9d1da8

  • user_agent

    Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.38 Safari/537.36 Brave/75

Targets

    • Target

      7915069b383d07_JC.exe

    • Size

      338KB

    • MD5

      7915069b383d07cf16180aecc449848f

    • SHA1

      c753509b10419146f444b57c46033dc7f95d5a7f

    • SHA256

      29edb23e89b1512a4c044133cbafc863eb2710f8d8d3828ee0583cd1c528da60

    • SHA512

      0391402372bfe2fe1fbdb25ee641c2ea7b1badaa8b322fa005609ae34fb07f627e73fb0f90ec311a112eb13e71ac8a3e2a92e582d0880e2ca2f66785b02c2791

    • SSDEEP

      6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTV10qhhTcAjrt:qtUGfVwUFzRG6EQ0POfiTTL0qoAjrt

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks