Overview

overview

10

Static

static

3

5d0e57b995...6d.exe

windows7-x64

10

5d0e57b995...6d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d0e57b99538971d9aa04be4a0fc826d

  • Size

    649KB

  • Sample

    240115-pcqsdafdhj

  • MD5

    5d0e57b99538971d9aa04be4a0fc826d

  • SHA1

    f7bb54fce32a4b7fa9da0e6e9e880cb05628c374

  • SHA256

    e01f8ef56abd5e592164790dc017c2d81d2547506da9b859f24dee062a0676bc

  • SHA512

    1f3086650e60fda0f4727b1d7920c5ec15f17876f3f8f975308d805c1ca808a277d765b199a55408430aa476daaa4b36331e504a450b5c54922fe541aa6b4555

  • SSDEEP

    12288:aihHK4AicxhlRsmPtJw0LSvfbJEIwxB3NucHHZtiZanGHW:LlVAiMtxLSvCJJsUGHW

Score
10/10
vidar916stealer

Malware Config

Extracted

Family

vidar

Version

40

Botnet

916

C2

https://lenak513.tumblr.com/

Attributes
  • profile_id

    916

Targets

    • Target

      5d0e57b99538971d9aa04be4a0fc826d

    • Size

      649KB

    • MD5

      5d0e57b99538971d9aa04be4a0fc826d

    • SHA1

      f7bb54fce32a4b7fa9da0e6e9e880cb05628c374

    • SHA256

      e01f8ef56abd5e592164790dc017c2d81d2547506da9b859f24dee062a0676bc

    • SHA512

      1f3086650e60fda0f4727b1d7920c5ec15f17876f3f8f975308d805c1ca808a277d765b199a55408430aa476daaa4b36331e504a450b5c54922fe541aa6b4555

    • SSDEEP

      12288:aihHK4AicxhlRsmPtJw0LSvfbJEIwxB3NucHHZtiZanGHW:LlVAiMtxLSvCJJsUGHW

    Score
    10/10
    vidar916stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks