Overview

overview

10

Static

static

3

2fcaae73e8...14.exe

windows7-x64

10

2fcaae73e8...14.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fcaae73e80aefac093facddf4e25014

  • Size

    630KB

  • Sample

    231231-ktg5cafdc6

  • MD5

    2fcaae73e80aefac093facddf4e25014

  • SHA1

    02dbe04b2f1068cb786c499dfcf34895607f554d

  • SHA256

    a0983e1772cefbf3e5695078124fb00d4333362b19a59a799811ffd2ccc2db5e

  • SHA512

    218e313c2d60aa4985d3759388b3bc365a74fe718be07d3b747fdb7d073fbbc66668e4a486f2d8aaeae8242700a4f60c371f40721ffd97facfb19c06e2710b09

  • SSDEEP

    12288:14Xa10WFCgyU/9Ct7SiRzdHTSiTfFUITI9q6LEdPi7f2Q:1l10WFlFS/DTfFUJ9qTdPiy

Score
10/10
vidar933stealer

Malware Config

Extracted

Family

vidar

Version

39.8

Botnet

933

C2

https://xeronxikxxx.tumblr.com/

Attributes
  • profile_id

    933

Targets

    • Target

      2fcaae73e80aefac093facddf4e25014

    • Size

      630KB

    • MD5

      2fcaae73e80aefac093facddf4e25014

    • SHA1

      02dbe04b2f1068cb786c499dfcf34895607f554d

    • SHA256

      a0983e1772cefbf3e5695078124fb00d4333362b19a59a799811ffd2ccc2db5e

    • SHA512

      218e313c2d60aa4985d3759388b3bc365a74fe718be07d3b747fdb7d073fbbc66668e4a486f2d8aaeae8242700a4f60c371f40721ffd97facfb19c06e2710b09

    • SSDEEP

      12288:14Xa10WFCgyU/9Ct7SiRzdHTSiTfFUITI9q6LEdPi7f2Q:1l10WFlFS/DTfFUJ9qTdPiy

    Score
    10/10
    vidar933stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar Stealer

      stealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scheduled Task/Job

1
T1053

Persistence

Scheduled Task/Job

1
T1053

Privilege Escalation

Scheduled Task/Job

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Resource Development

Reconnaissance

Tasks