Overview

overview

10

Static

static

3

42f5415bc6...69.exe

windows7-x64

10

42f5415bc6...69.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42f5415bc69a47f38c87ec95a6895f69

  • Size

    506KB

  • Sample

    240105-gyzy6seeep

  • MD5

    42f5415bc69a47f38c87ec95a6895f69

  • SHA1

    d694113ffab9d72cbe4d876b393bfef2c463e821

  • SHA256

    129dfae761bb3e09c9afc435bee0d1a40c5c0143b0840d2250f44525b4e8f933

  • SHA512

    3f66fa90f2bf77f6e8c19d88a5d5b233d17e4699e336eb5eafb20a346664c3d480b7439e9804f6af98b47cd027f712865215fce324030b568ebaf34a4a053b85

  • SSDEEP

    12288:ae+dkxPsiPD0oRUMtzQdxBVEeIvdAMK/:a9ukoRUMtIhEeQA

Score
10/10
vidar916stealer

Malware Config

Extracted

Family

vidar

Version

40.1

Botnet

916

C2

https://eduarroma.tumblr.com/

Attributes
  • profile_id

    916

Targets

    • Target

      42f5415bc69a47f38c87ec95a6895f69

    • Size

      506KB

    • MD5

      42f5415bc69a47f38c87ec95a6895f69

    • SHA1

      d694113ffab9d72cbe4d876b393bfef2c463e821

    • SHA256

      129dfae761bb3e09c9afc435bee0d1a40c5c0143b0840d2250f44525b4e8f933

    • SHA512

      3f66fa90f2bf77f6e8c19d88a5d5b233d17e4699e336eb5eafb20a346664c3d480b7439e9804f6af98b47cd027f712865215fce324030b568ebaf34a4a053b85

    • SSDEEP

      12288:ae+dkxPsiPD0oRUMtzQdxBVEeIvdAMK/:a9ukoRUMtIhEeQA

    Score
    10/10
    vidar916stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks