Overview

overview

10

Static

static

3

ff349fed38...68.exe

windows7-x64

10

ff349fed38...68.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff349fed38ed3a64d2278e135a9ef668

  • Size

    660KB

  • Sample

    231228-28jp6aaceq

  • MD5

    ff349fed38ed3a64d2278e135a9ef668

  • SHA1

    5a6bee9df8deab520cf99b96d5a9da83d0165282

  • SHA256

    87cc5d85b8cfd8c3fceff58c1ac8fa30724f84c07bd5353b305f65e0365ec96e

  • SHA512

    f81cda8a63780e3399323502183e195cfabb43797cf693f8d783cad33a5c9dda29c6f95aaf49d3015a0d37ff5586d53591ba61d7d63e5d6f66b3f30156aa6180

  • SSDEEP

    12288:ECzXAEP06Aw9lRakHpiGkfrh6EarSwj/1Rndx0hV+2YnnhF9yP1ZOP:fz44RdJJkfkzRjT0uLHsX

Score
10/10
vidar937stealer

Malware Config

Extracted

Family

vidar

Version

39.8

Botnet

937

C2

https://xeronxikxxx.tumblr.com/

Attributes
  • profile_id

    937

Targets

    • Target

      ff349fed38ed3a64d2278e135a9ef668

    • Size

      660KB

    • MD5

      ff349fed38ed3a64d2278e135a9ef668

    • SHA1

      5a6bee9df8deab520cf99b96d5a9da83d0165282

    • SHA256

      87cc5d85b8cfd8c3fceff58c1ac8fa30724f84c07bd5353b305f65e0365ec96e

    • SHA512

      f81cda8a63780e3399323502183e195cfabb43797cf693f8d783cad33a5c9dda29c6f95aaf49d3015a0d37ff5586d53591ba61d7d63e5d6f66b3f30156aa6180

    • SSDEEP

      12288:ECzXAEP06Aw9lRakHpiGkfrh6EarSwj/1Rndx0hV+2YnnhF9yP1ZOP:fz44RdJJkfkzRjT0uLHsX

    Score
    10/10
    vidar937stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks