Overview

overview

10

Static

static

1

32d1a33a5d...c9.exe

windows7-x64

10

32d1a33a5d...c9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32d1a33a5dc17560ff620016b398fec9

  • Size

    566KB

  • Sample

    231231-mnw3esfhf9

  • MD5

    32d1a33a5dc17560ff620016b398fec9

  • SHA1

    d8b202a3e682a0ccb3b7ee2295d5d62133cc7458

  • SHA256

    18a3ac7fdc9dd873724112c6a390f3c6e5876c6b72664575bb259ad482fdfa18

  • SHA512

    ed3c6d9c9b36aa1d4e1e837c7d081189ec9d177a3fd9d6d1e02c58fea072796220f9322de12cde778c6db3a6d777e1a8c201925fd3e9f284e322ee785c92cadb

  • SSDEEP

    12288:hFN2IR/OSZkYF3KMdgzNv4IG3MQLQ+RSKua8PB3JsdAZvfGA2HaM:hKlS+MdgSIV0Q+vbSsdAZHOHaM

Score
10/10
vidar921stealer

Malware Config

Extracted

Family

vidar

Version

39.7

Botnet

921

C2

https://shpak125.tumblr.com/

Attributes
  • profile_id

    921

Targets

    • Target

      32d1a33a5dc17560ff620016b398fec9

    • Size

      566KB

    • MD5

      32d1a33a5dc17560ff620016b398fec9

    • SHA1

      d8b202a3e682a0ccb3b7ee2295d5d62133cc7458

    • SHA256

      18a3ac7fdc9dd873724112c6a390f3c6e5876c6b72664575bb259ad482fdfa18

    • SHA512

      ed3c6d9c9b36aa1d4e1e837c7d081189ec9d177a3fd9d6d1e02c58fea072796220f9322de12cde778c6db3a6d777e1a8c201925fd3e9f284e322ee785c92cadb

    • SSDEEP

      12288:hFN2IR/OSZkYF3KMdgzNv4IG3MQLQ+RSKua8PB3JsdAZvfGA2HaM:hKlS+MdgSIV0Q+vbSsdAZHOHaM

    Score
    10/10
    vidar921stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar Stealer

      stealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks