Overview

overview

10

Static

static

3

0646787303...f0.exe

windows7-x64

10

0646787303...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    064678730382db3dd2f3b6d2f33051f0

  • Size

    603KB

  • Sample

    231229-2w1g5saden

  • MD5

    064678730382db3dd2f3b6d2f33051f0

  • SHA1

    a6bdd54fa4da526ae2a89d53e9aff421137e1121

  • SHA256

    26554dca1108a1e319762acf387f72acb75a759ac852570bad7e1c92739f78e1

  • SHA512

    5b429e1ecb58e6923b671bfafa6e2092c424e4af6e2c4e3b25b7d812cd44bd84505d6f1264b786a307099dffcb9b8122bfcbe5cb7fbd9183d94bfcc8b10f6497

  • SSDEEP

    12288:mBn0WC2QEd7rehZ0sJde/IyrzLCiqfWUinTDNnrto2MNXOBPAi:mB0WC2Ld7reZ0sJo/9rzLC7LiHt5o2MV

Score
10/10
vidar818stealer

Malware Config

Extracted

Family

vidar

Version

39.7

Botnet

818

C2

https://shpak125.tumblr.com/

Attributes
  • profile_id

    818

Targets

    • Target

      064678730382db3dd2f3b6d2f33051f0

    • Size

      603KB

    • MD5

      064678730382db3dd2f3b6d2f33051f0

    • SHA1

      a6bdd54fa4da526ae2a89d53e9aff421137e1121

    • SHA256

      26554dca1108a1e319762acf387f72acb75a759ac852570bad7e1c92739f78e1

    • SHA512

      5b429e1ecb58e6923b671bfafa6e2092c424e4af6e2c4e3b25b7d812cd44bd84505d6f1264b786a307099dffcb9b8122bfcbe5cb7fbd9183d94bfcc8b10f6497

    • SSDEEP

      12288:mBn0WC2QEd7rehZ0sJde/IyrzLCiqfWUinTDNnrto2MNXOBPAi:mB0WC2Ld7reZ0sJo/9rzLC7LiHt5o2MV

    Score
    10/10
    vidar818stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks