Overview

overview

10

Static

static

3

9a08f0c18a...63.exe

windows7-x64

10

9a08f0c18a...63.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a08f0c18a35ff6946eba6a6e9950c63

  • Size

    675KB

  • Sample

    231222-qd8j9aecfp

  • MD5

    9a08f0c18a35ff6946eba6a6e9950c63

  • SHA1

    687b4e0016c9c910ece451284de668c22a585aed

  • SHA256

    808b6c52dd9ade6af0cd3a575a1049398aed93ecc7260516d07f2130e9f1900a

  • SHA512

    9fa1598cf07c11fd33886dceee4d484362e845e39574a6508971f21f2d8caf19d0017519f639c0bcd029dd13ecb1005bf9967456ed2c96022f71abdbd610b443

  • SSDEEP

    12288:xwXJkaAM42ns2rYzQX1aiab09VOG9fD2xhZeuiyhm0OT5OBST7THlS:ODvns2sC1aiSYD7oeuNpE5O4JS

Score
10/10
vidar933stealer

Malware Config

Extracted

Family

vidar

Version

40.4

Botnet

933

C2

https://romkaxarit.tumblr.com/

Attributes
  • profile_id

    933

Targets

    • Target

      9a08f0c18a35ff6946eba6a6e9950c63

    • Size

      675KB

    • MD5

      9a08f0c18a35ff6946eba6a6e9950c63

    • SHA1

      687b4e0016c9c910ece451284de668c22a585aed

    • SHA256

      808b6c52dd9ade6af0cd3a575a1049398aed93ecc7260516d07f2130e9f1900a

    • SHA512

      9fa1598cf07c11fd33886dceee4d484362e845e39574a6508971f21f2d8caf19d0017519f639c0bcd029dd13ecb1005bf9967456ed2c96022f71abdbd610b443

    • SSDEEP

      12288:xwXJkaAM42ns2rYzQX1aiab09VOG9fD2xhZeuiyhm0OT5OBST7THlS:ODvns2sC1aiSYD7oeuNpE5O4JS

    Score
    10/10
    vidar933stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks