Overview

overview

10

Static

static

3

1143656f95...d3.exe

windows7-x64

10

1143656f95...d3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1143656f95e911091b4bbbd674f640d3

  • Size

    731KB

  • Sample

    231221-18ycwacegr

  • MD5

    1143656f95e911091b4bbbd674f640d3

  • SHA1

    7abf3bef04dc985225078b8c30978b5556622b76

  • SHA256

    058ff1d64435282f36001f5f4209ea6931cfafa998919abe3ac500f9da860eeb

  • SHA512

    8a0ddd8d09f715b760df036815d731395d094c32ce3c3cded004518b02dd6cafc6f954d8c92843bfd31242a65c92e9937e8d88e33b455193576cf8c80f5c4566

  • SSDEEP

    12288:X0OGuI3rgXz+XBLWoIX/Se0Z7eCT775NDT2N7qRYbeh+M0SXqYZv4:RGZgkJEe7Jz5NDS91behhj

Score
10/10
vidar517stealer

Malware Config

Extracted

Family

vidar

Version

40.2

Botnet

517

C2

https://kipriauka.tumblr.com/

Attributes
  • profile_id

    517

Targets

    • Target

      1143656f95e911091b4bbbd674f640d3

    • Size

      731KB

    • MD5

      1143656f95e911091b4bbbd674f640d3

    • SHA1

      7abf3bef04dc985225078b8c30978b5556622b76

    • SHA256

      058ff1d64435282f36001f5f4209ea6931cfafa998919abe3ac500f9da860eeb

    • SHA512

      8a0ddd8d09f715b760df036815d731395d094c32ce3c3cded004518b02dd6cafc6f954d8c92843bfd31242a65c92e9937e8d88e33b455193576cf8c80f5c4566

    • SSDEEP

      12288:X0OGuI3rgXz+XBLWoIX/Se0Z7eCT775NDT2N7qRYbeh+M0SXqYZv4:RGZgkJEe7Jz5NDS91behhj

    Score
    10/10
    vidar517stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar Stealer

      stealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks