Overview

overview

10

Static

static

1

55de04a0c8...9a.exe

windows7-x64

1

55de04a0c8...9a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55de04a0c8bb1e49015b62988c835b9a

  • Size

    693KB

  • Sample

    240112-jgmzdscfh2

  • MD5

    55de04a0c8bb1e49015b62988c835b9a

  • SHA1

    6a91271deff3f90359e95cafb722f1d9db7f80f3

  • SHA256

    3114d9a19def58cc62a9b5dbe78360e64772b46e1815c974f318cafb99eedc98

  • SHA512

    f723a33d5e2ba14c45aa30b83887d2f9690266a736f3201cebcdc986b7d4f7a97458f05bbe4eb74e363f964bcb66dad230bc195328493cc387f4733d22f7b11a

  • SSDEEP

    12288:ity5w2s0BhP2PFro43nQMmo4RRNc0g+W2rQeQlAMPGII1RMXF93SVRvVNQxXU:i0TscQPFc8HTWK0g+W2rSGmfCVVVNQxk

Score
10/10
vidar921stealer

Malware Config

Extracted

Family

vidar

Version

39.9

Botnet

921

C2

https://prophefliloc.tumblr.com/

Attributes
  • profile_id

    921

Targets

    • Target

      55de04a0c8bb1e49015b62988c835b9a

    • Size

      693KB

    • MD5

      55de04a0c8bb1e49015b62988c835b9a

    • SHA1

      6a91271deff3f90359e95cafb722f1d9db7f80f3

    • SHA256

      3114d9a19def58cc62a9b5dbe78360e64772b46e1815c974f318cafb99eedc98

    • SHA512

      f723a33d5e2ba14c45aa30b83887d2f9690266a736f3201cebcdc986b7d4f7a97458f05bbe4eb74e363f964bcb66dad230bc195328493cc387f4733d22f7b11a

    • SSDEEP

      12288:ity5w2s0BhP2PFro43nQMmo4RRNc0g+W2rQeQlAMPGII1RMXF93SVRvVNQxXU:i0TscQPFc8HTWK0g+W2rSGmfCVVVNQxk

    Score
    10/10
    vidar921stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar Stealer

      stealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks