Overview

overview

10

Static

static

3

8adfd7039a...f0.exe

windows7-x64

10

8adfd7039a...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8adfd7039a7330cdcc38a65f945f93f0

  • Size

    601KB

  • Sample

    231222-n9td4abhe4

  • MD5

    8adfd7039a7330cdcc38a65f945f93f0

  • SHA1

    6c235c60db557b27eb28a6cca5665a1372ea1399

  • SHA256

    dd87cb6685d03ab2d58adbdd319890fde086bb33291d183aa11eb82b9ff80782

  • SHA512

    062978ec7e41cf96eacec31c21c7337b3694a1e1f120ce92217e4d1ab8d6ab2e9516896a96e27e0a96751935ad4be53cdb6ed0baad1455942a5243bcaddd898f

  • SSDEEP

    12288:PNNHS3WxOgC1Fh5FHf/zWDoRpNrKtImCyiWtNjWLzKfKKg:PNNHeNh5Jf/7nNrKtJC6vczp

Score
10/10
vidar706stealer

Malware Config

Extracted

Family

vidar

Version

40.5

Botnet

706

C2

https://gheorghip.tumblr.com/

Attributes
  • profile_id

    706

Targets

    • Target

      8adfd7039a7330cdcc38a65f945f93f0

    • Size

      601KB

    • MD5

      8adfd7039a7330cdcc38a65f945f93f0

    • SHA1

      6c235c60db557b27eb28a6cca5665a1372ea1399

    • SHA256

      dd87cb6685d03ab2d58adbdd319890fde086bb33291d183aa11eb82b9ff80782

    • SHA512

      062978ec7e41cf96eacec31c21c7337b3694a1e1f120ce92217e4d1ab8d6ab2e9516896a96e27e0a96751935ad4be53cdb6ed0baad1455942a5243bcaddd898f

    • SSDEEP

      12288:PNNHS3WxOgC1Fh5FHf/zWDoRpNrKtImCyiWtNjWLzKfKKg:PNNHeNh5Jf/7nNrKtJC6vczp

    Score
    10/10
    vidar706stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks