Overview

overview

10

Static

static

3

05f324f268...75.exe

windows7-x64

10

05f324f268...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05f324f268d89d538d005ed163c25375

  • Size

    513KB

  • Sample

    231229-2m5eqsbaf4

  • MD5

    05f324f268d89d538d005ed163c25375

  • SHA1

    fa7292f7ba4129b4bd67d0068115d427cfd5e137

  • SHA256

    7cfa425be47b2561475067a302230a42d4a90207b2080fe7bc35852d24f91f96

  • SHA512

    e4c424fd31a6bce2366909f084d93aa03fa0c7e8ccc55bdacae00b5e9129f5a66367752afe8bf8d02b285e7dbbbe4b1e21e9ce4b21f7e7daf21667b94d368f50

  • SSDEEP

    12288:F8j5Z8SzMDZDGZQ8Uc169x09BDCQQ7lwPQeit1NxZZL:F6NOGZQ8Ue69x0c7KPQeitxf

Score
10/10
vidar706stealer

Malware Config

Extracted

Family

vidar

Version

40.1

Botnet

706

C2

https://eduarroma.tumblr.com/

Attributes
  • profile_id

    706

Targets

    • Target

      05f324f268d89d538d005ed163c25375

    • Size

      513KB

    • MD5

      05f324f268d89d538d005ed163c25375

    • SHA1

      fa7292f7ba4129b4bd67d0068115d427cfd5e137

    • SHA256

      7cfa425be47b2561475067a302230a42d4a90207b2080fe7bc35852d24f91f96

    • SHA512

      e4c424fd31a6bce2366909f084d93aa03fa0c7e8ccc55bdacae00b5e9129f5a66367752afe8bf8d02b285e7dbbbe4b1e21e9ce4b21f7e7daf21667b94d368f50

    • SSDEEP

      12288:F8j5Z8SzMDZDGZQ8Uc169x09BDCQQ7lwPQeit1NxZZL:F6NOGZQ8Ue69x0c7KPQeitxf

    Score
    10/10
    vidar706stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks