Overview

overview

10

Static

static

3

f23be02058...00.exe

windows7-x64

10

f23be02058...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f23be0205818d5ca16fc769f25609e00

  • Size

    709KB

  • Sample

    231220-vnlwfsbdem

  • MD5

    f23be0205818d5ca16fc769f25609e00

  • SHA1

    176782ecd6d10764d19dc2b72db315c0cfcb66ac

  • SHA256

    92d00e1532ff93e6d83d772754b458b253b61404cb35205a81827a04459989ba

  • SHA512

    d462e2809f2e85558328a12897d30f4f16c6f96349cf3f5d59ce7cd27bc5b7b4e2c0f5861c2d89f6bf373a7d9eefe9940867f1d8f24838f6bd11bf1a8d7c41a6

  • SSDEEP

    12288:0nefe1aAWAGiz4ykZOtXvD2v4FeM5lHKONcn75A5xGOHuNCwk8vcnn0B19b:04e1ymz4ykZwXaM5lqONcsBHKkN0XV

Score
10/10
vidar903stealer

Malware Config

Extracted

Family

vidar

Version

41.1

Botnet

903

C2

https://mas.to/@bardak1ho

Attributes
  • profile_id

    903

Targets

    • Target

      f23be0205818d5ca16fc769f25609e00

    • Size

      709KB

    • MD5

      f23be0205818d5ca16fc769f25609e00

    • SHA1

      176782ecd6d10764d19dc2b72db315c0cfcb66ac

    • SHA256

      92d00e1532ff93e6d83d772754b458b253b61404cb35205a81827a04459989ba

    • SHA512

      d462e2809f2e85558328a12897d30f4f16c6f96349cf3f5d59ce7cd27bc5b7b4e2c0f5861c2d89f6bf373a7d9eefe9940867f1d8f24838f6bd11bf1a8d7c41a6

    • SSDEEP

      12288:0nefe1aAWAGiz4ykZOtXvD2v4FeM5lHKONcn75A5xGOHuNCwk8vcnn0B19b:04e1ymz4ykZwXaM5lqONcsBHKkN0XV

    Score
    10/10
    vidar903stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks