Overview

overview

10

Static

static

3

6936901e97...00.exe

windows7-x64

10

6936901e97...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6936901e97ee480b4a602f20c15b0a00

  • Size

    544KB

  • Sample

    240120-cj2r1ahffn

  • MD5

    6936901e97ee480b4a602f20c15b0a00

  • SHA1

    bd2f93be0e8020e352cb98865f4f8c4314a863c6

  • SHA256

    1e504dc4522bade46026e1b0e62a10a32f7a12d84b9c59a37ef3142c2be5ddc3

  • SHA512

    84f2d2b36a90dee6ca8635539e491cb1d82ce6253a640644864924ed7e3a30a5b2789eff809526300587cfcb441939075cb9e430f25d48bcd7f8b7b49dd34155

  • SSDEEP

    12288:BDIa8zZ/El18Fl066i8kEqS5SQdCGiuMYOuoDDi:ea8zul18c3iS5tJqNPi

Score
10/10
vidar937stealer

Malware Config

Extracted

Family

vidar

Version

40

Botnet

937

C2

https://lenak513.tumblr.com/

Attributes
  • profile_id

    937

Targets

    • Target

      6936901e97ee480b4a602f20c15b0a00

    • Size

      544KB

    • MD5

      6936901e97ee480b4a602f20c15b0a00

    • SHA1

      bd2f93be0e8020e352cb98865f4f8c4314a863c6

    • SHA256

      1e504dc4522bade46026e1b0e62a10a32f7a12d84b9c59a37ef3142c2be5ddc3

    • SHA512

      84f2d2b36a90dee6ca8635539e491cb1d82ce6253a640644864924ed7e3a30a5b2789eff809526300587cfcb441939075cb9e430f25d48bcd7f8b7b49dd34155

    • SSDEEP

      12288:BDIa8zZ/El18Fl066i8kEqS5SQdCGiuMYOuoDDi:ea8zul18c3iS5tJqNPi

    Score
    10/10
    vidar937stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks