Overview

overview

10

Static

static

3

cab8f8d20a...f3.exe

windows7-x64

10

cab8f8d20a...f3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cab8f8d20a63cf1f7f762b98a06078f3

  • Size

    665KB

  • Sample

    231228-gy8ajsgcb9

  • MD5

    cab8f8d20a63cf1f7f762b98a06078f3

  • SHA1

    33d8c641b9ef7f89cdb816a0f0d42cc4e3d359d2

  • SHA256

    072f808a569e3245f2058ecc8d31e89c684b4135145328643787544e14783bd5

  • SHA512

    6e7ba9662f873f1d02f9593158e2f327fdd513a523a0ccc787fca67d835593068a10f1b1eb10d368c37fca223af58caeeaac330fe654ba25518e8c4539cf3489

  • SSDEEP

    12288:tefHn1XDFug3L2dSHd7XQjpumUKPYxN1XHImg6YKL+K:ylDFuiismUrxN1XHXfYKL+K

Score
10/10
vidar828stealer

Malware Config

Extracted

Family

vidar

Version

39.7

Botnet

828

C2

https://shpak125.tumblr.com/

Attributes
  • profile_id

    828

Targets

    • Target

      cab8f8d20a63cf1f7f762b98a06078f3

    • Size

      665KB

    • MD5

      cab8f8d20a63cf1f7f762b98a06078f3

    • SHA1

      33d8c641b9ef7f89cdb816a0f0d42cc4e3d359d2

    • SHA256

      072f808a569e3245f2058ecc8d31e89c684b4135145328643787544e14783bd5

    • SHA512

      6e7ba9662f873f1d02f9593158e2f327fdd513a523a0ccc787fca67d835593068a10f1b1eb10d368c37fca223af58caeeaac330fe654ba25518e8c4539cf3489

    • SSDEEP

      12288:tefHn1XDFug3L2dSHd7XQjpumUKPYxN1XHImg6YKL+K:ylDFuiismUrxN1XHXfYKL+K

    Score
    10/10
    vidar828stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks