Overview

overview

10

Static

static

3

1cbb5372c1...79.exe

windows7-x64

10

1cbb5372c1...79.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1cbb5372c123f5ecdcdd9033ee95ab79

  • Size

    617KB

  • Sample

    231230-z5hbtaaegk

  • MD5

    1cbb5372c123f5ecdcdd9033ee95ab79

  • SHA1

    007a42611b5e3f7112b07d1ec5354f5f839ae325

  • SHA256

    377b11865912e10a19e1e05e866e525d33825498b4d6dd56fd3e5637a570b5cc

  • SHA512

    a7c69e23fc35a8bc71c32bd60991539dacc01650a64a3ce0d931f466531d2de04d00fcf7b15500cadaad2b17b76bf1652e40c3aec890b53a1117e8515368d4a6

  • SSDEEP

    6144:lHf34eSsBG59mAry+y5WeE6G/Bo4bpF6T3zNFxmWNPnFxKF9Y//3GTkQic8CWb32:x34n5G+y5zkRbaXNFpnIyRQVIpsdHN2

Score
10/10
vidar903stealer

Malware Config

Extracted

Family

vidar

Version

39.8

Botnet

903

C2

https://xeronxikxxx.tumblr.com/

Attributes
  • profile_id

    903

Targets

    • Target

      1cbb5372c123f5ecdcdd9033ee95ab79

    • Size

      617KB

    • MD5

      1cbb5372c123f5ecdcdd9033ee95ab79

    • SHA1

      007a42611b5e3f7112b07d1ec5354f5f839ae325

    • SHA256

      377b11865912e10a19e1e05e866e525d33825498b4d6dd56fd3e5637a570b5cc

    • SHA512

      a7c69e23fc35a8bc71c32bd60991539dacc01650a64a3ce0d931f466531d2de04d00fcf7b15500cadaad2b17b76bf1652e40c3aec890b53a1117e8515368d4a6

    • SSDEEP

      6144:lHf34eSsBG59mAry+y5WeE6G/Bo4bpF6T3zNFxmWNPnFxKF9Y//3GTkQic8CWb32:x34n5G+y5zkRbaXNFpnIyRQVIpsdHN2

    Score
    10/10
    vidar903stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks