Overview

overview

10

Static

static

3

008f43677e...40.exe

windows7-x64

10

008f43677e...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    008f43677eadd2dfbc8fdc4566628e40

  • Size

    649KB

  • Sample

    231224-rpzxxsdgaq

  • MD5

    008f43677eadd2dfbc8fdc4566628e40

  • SHA1

    4d2dc0112d3cf680203ecbe47b603b04ce1a74de

  • SHA256

    c4ec55cd2d04aa65481f5ef213c4ccd0a5825483cdd126dc5e7b62cf10720176

  • SHA512

    60dee1f38fc3cf09517dd657884e09f4ec19f0142a54ff27e020d0ba6b90bb51c9f140cd6534cca10b2838c77d00f4c78c8fa15ae65734c1f771ceeffec1e71d

  • SSDEEP

    12288:EWSsDdZpJAFgAC+puKoZy0dcj7n1noP/8yjq20EHh2zPPbo:Ew+FnC+0Fcj7nCMyjqIHUzHbo

Score
10/10
vidar706stealer

Malware Config

Extracted

Family

vidar

Version

39.7

Botnet

706

C2

https://shpak125.tumblr.com/

Attributes
  • profile_id

    706

Targets

    • Target

      008f43677eadd2dfbc8fdc4566628e40

    • Size

      649KB

    • MD5

      008f43677eadd2dfbc8fdc4566628e40

    • SHA1

      4d2dc0112d3cf680203ecbe47b603b04ce1a74de

    • SHA256

      c4ec55cd2d04aa65481f5ef213c4ccd0a5825483cdd126dc5e7b62cf10720176

    • SHA512

      60dee1f38fc3cf09517dd657884e09f4ec19f0142a54ff27e020d0ba6b90bb51c9f140cd6534cca10b2838c77d00f4c78c8fa15ae65734c1f771ceeffec1e71d

    • SSDEEP

      12288:EWSsDdZpJAFgAC+puKoZy0dcj7n1noP/8yjq20EHh2zPPbo:Ew+FnC+0Fcj7nCMyjqIHUzHbo

    Score
    10/10
    vidar706stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks