Overview

overview

10

Static

static

10

80be083d6e...40.exe

windows7-x64

3

80be083d6e...40.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80be083d6e199ea9ac0391d791379440

  • Size

    624KB

  • Sample

    240129-ys91mahfg7

  • MD5

    80be083d6e199ea9ac0391d791379440

  • SHA1

    363e9e7abf44aa88b18952e2d6247aa84b27cfb7

  • SHA256

    421de3e1abdd3307f05eb1d1900f0e5e12e99794f51fb14fffee3aa5427e3f03

  • SHA512

    f2732d76d095d3b8f3c60253c333c0e7c032324d4d26a963e02ca3b3be3d7818b3a04f013f5914ca80f4da3cf849207861c7ecffa8aba8c7cda8d498d9fd0a37

  • SSDEEP

    12288:VPaYUeh6oGci940+hbwozJup8tGeFE+QpK6OUdnUYRJF93Ophc41UYNbh9FKuLRl:VPOHEi9bozJD9WvK3UdnUEvd+c4XNE7M

Score
10/10
vidar903stealer

Malware Config

Extracted

Family

vidar

Version

40.1

Botnet

903

C2

https://eduarroma.tumblr.com/

Attributes
  • profile_id

    903

Targets

    • Target

      80be083d6e199ea9ac0391d791379440

    • Size

      624KB

    • MD5

      80be083d6e199ea9ac0391d791379440

    • SHA1

      363e9e7abf44aa88b18952e2d6247aa84b27cfb7

    • SHA256

      421de3e1abdd3307f05eb1d1900f0e5e12e99794f51fb14fffee3aa5427e3f03

    • SHA512

      f2732d76d095d3b8f3c60253c333c0e7c032324d4d26a963e02ca3b3be3d7818b3a04f013f5914ca80f4da3cf849207861c7ecffa8aba8c7cda8d498d9fd0a37

    • SSDEEP

      12288:VPaYUeh6oGci940+hbwozJup8tGeFE+QpK6OUdnUYRJF93Ophc41UYNbh9FKuLRl:VPOHEi9bozJD9WvK3UdnUEvd+c4XNE7M

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks