Overview

overview

10

Static

static

3

4402fb9387...84.exe

windows7-x64

10

4402fb9387...84.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4402fb93874135f5522e13bdb54b3284

  • Size

    697KB

  • Sample

    231222-bpyrvsbgdm

  • MD5

    4402fb93874135f5522e13bdb54b3284

  • SHA1

    7991f2a686ea6514e4a371eb2f8addba5576ff45

  • SHA256

    9a65861b5c3fda15c9aab49fe5c74984b0573d31caf593dcbf50f0ed61cbfef8

  • SHA512

    f1d99775966757770d58bdc4f351dd94eae78652b3d08031d61f4dbc484846e24c6de49c7b9bd746f017291a0069bd816ecfbfa84adf809e1f1d4cf2f86e4264

  • SSDEEP

    12288:EBw50hgcvxD3u3qxmEiUPJ/7+50Dzl09AKF+3AG06RkQrLGDkjvw0f:Sw50hBxzuClj+5IKi3rtkELGmvw0

Score
10/10
vidar937stealer

Malware Config

Extracted

Family

vidar

Version

40.4

Botnet

937

C2

https://romkaxarit.tumblr.com/

Attributes
  • profile_id

    937

Targets

    • Target

      4402fb93874135f5522e13bdb54b3284

    • Size

      697KB

    • MD5

      4402fb93874135f5522e13bdb54b3284

    • SHA1

      7991f2a686ea6514e4a371eb2f8addba5576ff45

    • SHA256

      9a65861b5c3fda15c9aab49fe5c74984b0573d31caf593dcbf50f0ed61cbfef8

    • SHA512

      f1d99775966757770d58bdc4f351dd94eae78652b3d08031d61f4dbc484846e24c6de49c7b9bd746f017291a0069bd816ecfbfa84adf809e1f1d4cf2f86e4264

    • SSDEEP

      12288:EBw50hgcvxD3u3qxmEiUPJ/7+50Dzl09AKF+3AG06RkQrLGDkjvw0f:Sw50hBxzuClj+5IKi3rtkELGmvw0

    Score
    10/10
    vidar937stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks