Overview

overview

10

Static

static

3

9130a05614...bc.exe

windows7-x64

10

9130a05614...bc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9130a0561412f760983d01f01d50f6bc

  • Size

    648KB

  • Sample

    240205-gexdyadhbp

  • MD5

    9130a0561412f760983d01f01d50f6bc

  • SHA1

    9e981f317af505bfe5c05cfcba11841fd82f4ff8

  • SHA256

    ac6b07db75185dfe52fe85f49a964757ed081b333bf05d52efec3fc0228b9924

  • SHA512

    6d0a430a1c9095b2f56d2b857e973394fdd10f5b0fb12e784677a2754b76201671dbec038ffff0605bde303b1c61b45b8f51990df59881c96d21693a5c37f982

  • SSDEEP

    12288:IzNXqy00SbfPhv4n3+8m8B2KxnhFfwZYd4shhPW0xLWaOhDomp1yf:MJL002h8D1hma3zWgLWaOFoG10

Score
10/10
vidar916stealer

Malware Config

Extracted

Family

vidar

Version

40

Botnet

916

C2

https://lenak513.tumblr.com/

Attributes
  • profile_id

    916

Targets

    • Target

      9130a0561412f760983d01f01d50f6bc

    • Size

      648KB

    • MD5

      9130a0561412f760983d01f01d50f6bc

    • SHA1

      9e981f317af505bfe5c05cfcba11841fd82f4ff8

    • SHA256

      ac6b07db75185dfe52fe85f49a964757ed081b333bf05d52efec3fc0228b9924

    • SHA512

      6d0a430a1c9095b2f56d2b857e973394fdd10f5b0fb12e784677a2754b76201671dbec038ffff0605bde303b1c61b45b8f51990df59881c96d21693a5c37f982

    • SSDEEP

      12288:IzNXqy00SbfPhv4n3+8m8B2KxnhFfwZYd4shhPW0xLWaOhDomp1yf:MJL002h8D1hma3zWgLWaOFoG10

    Score
    10/10
    vidar916stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks