Overview

overview

10

Static

static

3

65e3595ff4...96.exe

windows7-x64

10

65e3595ff4...96.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65e3595ff4d26473b875c6acd2be4696

  • Size

    601KB

  • Sample

    240118-ykjtgagbgj

  • MD5

    65e3595ff4d26473b875c6acd2be4696

  • SHA1

    9b2713fe3f26688c45f2787f92323c5be9d40a00

  • SHA256

    2d95197a3a6bb1f818f77e6fe070b7f469f9e82ac673ce37abb3c777137e9884

  • SHA512

    d67e2549f1469e844457382668e8faf53c46558816ae21416a9dec818837f84ee165a2e1c899fa3b83f2c7578d1bab83771b14198474267b51c7738601380b5a

  • SSDEEP

    12288:65HEy0bLc476CXGuBunkyOZnTcS2YTIi6t7aqHKabyh4XF8Peua8wX+8u:aObLlDunkyI25tt7N1yq18a818

Score
10/10
vidar937stealer

Malware Config

Extracted

Family

vidar

Version

40.1

Botnet

937

C2

https://eduarroma.tumblr.com/

Attributes
  • profile_id

    937

Targets

    • Target

      65e3595ff4d26473b875c6acd2be4696

    • Size

      601KB

    • MD5

      65e3595ff4d26473b875c6acd2be4696

    • SHA1

      9b2713fe3f26688c45f2787f92323c5be9d40a00

    • SHA256

      2d95197a3a6bb1f818f77e6fe070b7f469f9e82ac673ce37abb3c777137e9884

    • SHA512

      d67e2549f1469e844457382668e8faf53c46558816ae21416a9dec818837f84ee165a2e1c899fa3b83f2c7578d1bab83771b14198474267b51c7738601380b5a

    • SSDEEP

      12288:65HEy0bLc476CXGuBunkyOZnTcS2YTIi6t7aqHKabyh4XF8Peua8wX+8u:aObLlDunkyI25tt7N1yq18a818

    Score
    10/10
    vidar937stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks