Overview

overview

10

Static

static

3

8e3f639283...42.exe

windows7-x64

10

8e3f639283...42.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e3f6392833dcf592b9928f5c2564442

  • Size

    606KB

  • Sample

    240204-fd4wyscbhn

  • MD5

    8e3f6392833dcf592b9928f5c2564442

  • SHA1

    e356c6cc455b0354c06cb0a1b009434903316cb5

  • SHA256

    663e0c3fcf9f1c40753524d9d72ab9133a1deb9b35d25568ebf8a9b131b33752

  • SHA512

    aad286d4e442cadf70550a502b53de30d386be407d21cc512839ac4769d9026cc30863c1d98879a4d3d8160fd1fd5c67156035ac40728adf4f3033749cb17740

  • SSDEEP

    12288:GXRLnTtT/DeZP1EHTMICI11pm3uJnvaGITtf8nOvO1UXV:snZToGBPmIabTunHUl

Score
10/10
vidar936stealer

Malware Config

Extracted

Family

vidar

Version

40.1

Botnet

936

C2

https://eduarroma.tumblr.com/

Attributes
  • profile_id

    936

Targets

    • Target

      8e3f6392833dcf592b9928f5c2564442

    • Size

      606KB

    • MD5

      8e3f6392833dcf592b9928f5c2564442

    • SHA1

      e356c6cc455b0354c06cb0a1b009434903316cb5

    • SHA256

      663e0c3fcf9f1c40753524d9d72ab9133a1deb9b35d25568ebf8a9b131b33752

    • SHA512

      aad286d4e442cadf70550a502b53de30d386be407d21cc512839ac4769d9026cc30863c1d98879a4d3d8160fd1fd5c67156035ac40728adf4f3033749cb17740

    • SSDEEP

      12288:GXRLnTtT/DeZP1EHTMICI11pm3uJnvaGITtf8nOvO1UXV:snZToGBPmIabTunHUl

    Score
    10/10
    vidar936stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks