Overview

overview

10

Static

static

3

5d9966a0e3...2b.exe

windows7-x64

10

5d9966a0e3...2b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d9966a0e31e34dc656e5dd01882702b

  • Size

    677KB

  • Sample

    240115-ve73bsbefk

  • MD5

    5d9966a0e31e34dc656e5dd01882702b

  • SHA1

    1077ac4e288bfd776f99ac1e787cb54e76a4ec2a

  • SHA256

    7dfcf479d9f2a32d94d75e5504c0ce3386f6ccc333fa12dee0d75e0fb3fe3604

  • SHA512

    a764d581e804b8105ae87702eca3c74c84a12801564e6505392413b96f529eab3df94e874c5a6ac039f2a82b2c9f5bb4d474e023c6da36f8ffc4d86e13723b24

  • SSDEEP

    12288:nYpo/Up3pkFNb5uRSQesx/C8bSRZtcyomMAOfvwy:3/UO8HepomdOw

Score
10/10
vidar828stealer

Malware Config

Extracted

Family

vidar

Version

39.8

Botnet

828

C2

https://xeronxikxxx.tumblr.com/

Attributes
  • profile_id

    828

Targets

    • Target

      5d9966a0e31e34dc656e5dd01882702b

    • Size

      677KB

    • MD5

      5d9966a0e31e34dc656e5dd01882702b

    • SHA1

      1077ac4e288bfd776f99ac1e787cb54e76a4ec2a

    • SHA256

      7dfcf479d9f2a32d94d75e5504c0ce3386f6ccc333fa12dee0d75e0fb3fe3604

    • SHA512

      a764d581e804b8105ae87702eca3c74c84a12801564e6505392413b96f529eab3df94e874c5a6ac039f2a82b2c9f5bb4d474e023c6da36f8ffc4d86e13723b24

    • SSDEEP

      12288:nYpo/Up3pkFNb5uRSQesx/C8bSRZtcyomMAOfvwy:3/UO8HepomdOw

    Score
    10/10
    vidar828stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks