Overview

overview

10

Static

static

1

da1dce9bf9...3d.exe

windows7-x64

10

da1dce9bf9...3d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da1dce9bf9fc0777b731f7f919315c3d

  • Size

    504KB

  • Sample

    231228-myc3asddbj

  • MD5

    da1dce9bf9fc0777b731f7f919315c3d

  • SHA1

    660c0b804a0c522f1bc6ac53f12e28cece51d08c

  • SHA256

    ca77fa6ea006bb61812c11571551a058721ae6e829bf38afd8ba1c17d1d65e36

  • SHA512

    bb32addd22075d86e2acf6aaa71ea45ac369dc2991a01313fdf6595b1a5b2c38852912b034767fb117adf24a379f87b112df638c90b5d29e02bdf58eb5e5a246

  • SSDEEP

    12288:gig5cGyS7RXusazvEGSTC5eHLCyz2TN7+Lz:u5cm1XkzNS9CVREz

Score
10/10
vidar903stealer

Malware Config

Extracted

Family

vidar

Version

39.7

Botnet

903

C2

https://shpak125.tumblr.com/

Attributes
  • profile_id

    903

Targets

    • Target

      da1dce9bf9fc0777b731f7f919315c3d

    • Size

      504KB

    • MD5

      da1dce9bf9fc0777b731f7f919315c3d

    • SHA1

      660c0b804a0c522f1bc6ac53f12e28cece51d08c

    • SHA256

      ca77fa6ea006bb61812c11571551a058721ae6e829bf38afd8ba1c17d1d65e36

    • SHA512

      bb32addd22075d86e2acf6aaa71ea45ac369dc2991a01313fdf6595b1a5b2c38852912b034767fb117adf24a379f87b112df638c90b5d29e02bdf58eb5e5a246

    • SSDEEP

      12288:gig5cGyS7RXusazvEGSTC5eHLCyz2TN7+Lz:u5cm1XkzNS9CVREz

    Score
    10/10
    vidar903stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar Stealer

      stealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks