Overview

overview

10

Static

static

3

b63d8d8ffc...cd.exe

windows7-x64

10

b63d8d8ffc...cd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b63d8d8ffc60286cf5648012c80eb7cd

  • Size

    748KB

  • Sample

    231222-rdw2wseham

  • MD5

    b63d8d8ffc60286cf5648012c80eb7cd

  • SHA1

    73962357655120731366ad232fc75c69e4c73df7

  • SHA256

    3dca1ff9ed12b5e4366da8908486d194850d2e7f8d705b323109b62735483813

  • SHA512

    4676eb94f72dc3fb969737646853aa12806253a1bcb5ea4402a54d639626675c33f26bdea5f981e960ff5b02d6365393ab51219f827eb8d29cd4862f0cc1d11b

  • SSDEEP

    12288:0LX5MQHwSEvTUudWReEJ+TYJe/7dAM/CxgdU2TvLq5hRL4ziTSaX59YF:pQHwZTUud0gXdAM6q2szq/x+1F

Score
10/10
vidar937stealer

Malware Config

Extracted

Family

vidar

Version

40.3

Botnet

937

C2

https://lenko349.tumblr.com/

Attributes
  • profile_id

    937

Targets

    • Target

      b63d8d8ffc60286cf5648012c80eb7cd

    • Size

      748KB

    • MD5

      b63d8d8ffc60286cf5648012c80eb7cd

    • SHA1

      73962357655120731366ad232fc75c69e4c73df7

    • SHA256

      3dca1ff9ed12b5e4366da8908486d194850d2e7f8d705b323109b62735483813

    • SHA512

      4676eb94f72dc3fb969737646853aa12806253a1bcb5ea4402a54d639626675c33f26bdea5f981e960ff5b02d6365393ab51219f827eb8d29cd4862f0cc1d11b

    • SSDEEP

      12288:0LX5MQHwSEvTUudWReEJ+TYJe/7dAM/CxgdU2TvLq5hRL4ziTSaX59YF:pQHwZTUud0gXdAM6q2szq/x+1F

    Score
    10/10
    vidar937stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks