Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    623accd5c6532187ac7f47e352584e3ba28185b46c7018542cc7bf7c8ca551a3

  • Size

    283KB

  • Sample

    230904-sltgeahd37

  • MD5

    305a9485c4420304f2d328dee93f4b77

  • SHA1

    6c4cd0ea9f47becd543148fe31cb9373f9e68947

  • SHA256

    623accd5c6532187ac7f47e352584e3ba28185b46c7018542cc7bf7c8ca551a3

  • SHA512

    701879807f9c183d33b351bdd52702b60626c58f3e36b8224cb1603e84bace552eba2afe4e85373fe62677663370b616567df0f11f7565353357b423331d286e

  • SSDEEP

    6144:orNxN4RUUuNrpyrHwJlVOLjf83A57ULZnpZGJsrFZvmyZj0:oBn4i/NrpyrHwJqLjf8XnpZEsrXvmkj

Score
10/10
vidarb2ced91faf30889899f34458f95b8e93discoveryspywarestealer

Malware Config

Extracted

Family

vidar

Version

5.4

Botnet

b2ced91faf30889899f34458f95b8e93

C2

https://t.me/vogogor

https://steamcommunity.com/profiles/76561199545993403
Attributes
  • profile_id_v2

    b2ced91faf30889899f34458f95b8e93

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.2.13 (KHTML, like Gecko) Version/16.5.2 Safari/605.2.13

Targets

    • Target

      623accd5c6532187ac7f47e352584e3ba28185b46c7018542cc7bf7c8ca551a3

    • Size

      283KB

    • MD5

      305a9485c4420304f2d328dee93f4b77

    • SHA1

      6c4cd0ea9f47becd543148fe31cb9373f9e68947

    • SHA256

      623accd5c6532187ac7f47e352584e3ba28185b46c7018542cc7bf7c8ca551a3

    • SHA512

      701879807f9c183d33b351bdd52702b60626c58f3e36b8224cb1603e84bace552eba2afe4e85373fe62677663370b616567df0f11f7565353357b423331d286e

    • SSDEEP

      6144:orNxN4RUUuNrpyrHwJlVOLjf83A57ULZnpZGJsrFZvmyZj0:oBn4i/NrpyrHwJqLjf8XnpZEsrXvmkj

    Score
    10/10
    vidarb2ced91faf30889899f34458f95b8e93discoveryspywarestealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses 2FA software files, possible credential harvesting

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks