Overview

overview

10

Static

static

3

8655047058...c4.exe

windows7-x64

10

8655047058...c4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8655047058817419fbae97048b48bbc4

  • Size

    691KB

  • Sample

    231222-mxtnnagdal

  • MD5

    8655047058817419fbae97048b48bbc4

  • SHA1

    927e925561b4694d23bf36712a1c721d5e6a67aa

  • SHA256

    f4d5debcdf856ab87ed963f1f16e95370cc341ae2968abb33a2ae5b893e6062e

  • SHA512

    05aec093a1c3f30933a818c9963c6ec162f6cb50cf0ec8a245692893f50156a358fc2104f1a8551d09313b50ce4cd520448d45a6d2a2536382d9c410d668c3bd

  • SSDEEP

    12288:Zvf8HNJsSD6OJjlWQyC1A6c7wSObImC6YcpjOVH3QSloQ+syK8d1qzibKpn4:BktuGJ4b01c8DpSdQSIqziO2

Score
10/10
vidar706stealer

Malware Config

Extracted

Family

vidar

Version

40.4

Botnet

706

C2

https://romkaxarit.tumblr.com/

Attributes
  • profile_id

    706

Targets

    • Target

      8655047058817419fbae97048b48bbc4

    • Size

      691KB

    • MD5

      8655047058817419fbae97048b48bbc4

    • SHA1

      927e925561b4694d23bf36712a1c721d5e6a67aa

    • SHA256

      f4d5debcdf856ab87ed963f1f16e95370cc341ae2968abb33a2ae5b893e6062e

    • SHA512

      05aec093a1c3f30933a818c9963c6ec162f6cb50cf0ec8a245692893f50156a358fc2104f1a8551d09313b50ce4cd520448d45a6d2a2536382d9c410d668c3bd

    • SSDEEP

      12288:Zvf8HNJsSD6OJjlWQyC1A6c7wSObImC6YcpjOVH3QSloQ+syK8d1qzibKpn4:BktuGJ4b01c8DpSdQSIqziO2

    Score
    10/10
    vidar706stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks