Overview

overview

10

Static

static

3

fc8787297a...1a.exe

windows7-x64

10

fc8787297a...1a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc8787297ae7657073671d8ee1a9541a

  • Size

    666KB

  • Sample

    231220-wdvlaadfg8

  • MD5

    fc8787297ae7657073671d8ee1a9541a

  • SHA1

    3ff8306717e4ee41faf1c446a177170970a6eecb

  • SHA256

    fbe8bda4386a3697d64921e55876b28c134a1e12c151bed9a1ff93160db3a935

  • SHA512

    c16a4dcf68382f039fcd03e3832e9cd32e2d694cb9e7d5cd59136c4d1a97cbb754517703b1f28949a5e75cf26a8dadf4f5633ce035e38ea6bc7b3a3348766bc1

  • SSDEEP

    12288:VpxYZV0CYer9MgqLUFRW75tM72yxAesui+G1U32GI6niDg1QpwUdh:N3CYGILUFRW7oSyxdsuPGLrEiey

Score
10/10
vidar903stealer

Malware Config

Extracted

Family

vidar

Version

41.1

Botnet

903

C2

https://mas.to/@bardak1ho

Attributes
  • profile_id

    903

Targets

    • Target

      fc8787297ae7657073671d8ee1a9541a

    • Size

      666KB

    • MD5

      fc8787297ae7657073671d8ee1a9541a

    • SHA1

      3ff8306717e4ee41faf1c446a177170970a6eecb

    • SHA256

      fbe8bda4386a3697d64921e55876b28c134a1e12c151bed9a1ff93160db3a935

    • SHA512

      c16a4dcf68382f039fcd03e3832e9cd32e2d694cb9e7d5cd59136c4d1a97cbb754517703b1f28949a5e75cf26a8dadf4f5633ce035e38ea6bc7b3a3348766bc1

    • SSDEEP

      12288:VpxYZV0CYer9MgqLUFRW75tM72yxAesui+G1U32GI6niDg1QpwUdh:N3CYGILUFRW7oSyxdsuPGLrEiey

    Score
    10/10
    vidar903stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks