Overview

overview

10

Static

static

3

80121240b8...a7.exe

windows7-x64

10

80121240b8...a7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80121240b8d41282cca7ce60c431c9a7

  • Size

    648KB

  • Sample

    240129-rssm1sbgd6

  • MD5

    80121240b8d41282cca7ce60c431c9a7

  • SHA1

    64f13876da1999bb79a39a92c5c9b9c03b2ee289

  • SHA256

    6a2a903b2ea7a2b8f19afa152d1f8d1a2acdc47efed575a889ed853349ab9806

  • SHA512

    758fb7a63df65963c873c841eabacff7b21f29428b45d5346b212a1b4f8ebe7770a835d83cfb40f5551b2cf488e89ff96a97d5af12b51aac4220dfaf9235287b

  • SSDEEP

    12288:VxYx7+zqTPDEjUOvKF+YqrhRCXFxkWx0AKw8xGEE7zeCNMVjWKNTNj1:U6zqTLWYqrhR4FHYrxG3TNMVxb

Score
10/10
vidar916stealer

Malware Config

Extracted

Family

vidar

Version

40

Botnet

916

C2

https://lenak513.tumblr.com/

Attributes
  • profile_id

    916

Targets

    • Target

      80121240b8d41282cca7ce60c431c9a7

    • Size

      648KB

    • MD5

      80121240b8d41282cca7ce60c431c9a7

    • SHA1

      64f13876da1999bb79a39a92c5c9b9c03b2ee289

    • SHA256

      6a2a903b2ea7a2b8f19afa152d1f8d1a2acdc47efed575a889ed853349ab9806

    • SHA512

      758fb7a63df65963c873c841eabacff7b21f29428b45d5346b212a1b4f8ebe7770a835d83cfb40f5551b2cf488e89ff96a97d5af12b51aac4220dfaf9235287b

    • SSDEEP

      12288:VxYx7+zqTPDEjUOvKF+YqrhRCXFxkWx0AKw8xGEE7zeCNMVjWKNTNj1:U6zqTLWYqrhR4FHYrxG3TNMVxb

    Score
    10/10
    vidar916stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks