Overview

overview

10

Static

static

3

Set-up.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Set-up.exe

  • Size

    136.2MB

  • Sample

    240227-bdhw9scf44

  • MD5

    df14d372ecdd495127d1c3950b4a4c9c

  • SHA1

    384e35f8f938b27ea2f4b97afc798a25b67ae853

  • SHA256

    99c80e54400e52454d0f52f294a7b05b8e05386e4a2e9007f41393fee0654cf8

  • SHA512

    a7b980adfb7ad369538743c408ee5df557d50c698fd1000aaf702c29a9b16905526287d1e8f840335834945dba776247323b83a730019aa39940bac23d2d0659

  • SSDEEP

    196608:jjrU7vglcF8zp0zKmSMc8lhjjk3D1GMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGMl:jRyDSMxfoTr

Score
10/10
vidar97b92d10859a319d8736cd53ff3f8868stealer

Malware Config

Extracted

Family

vidar

Version

7.8

Botnet

97b92d10859a319d8736cd53ff3f8868

C2

http://5.252.118.12:80

https://t.me/voolkisms

https://t.me/karl3on

https://steamcommunity.com/profiles/76561199637071579
Attributes
  • profile_id_v2

    97b92d10859a319d8736cd53ff3f8868

  • user_agent

    Mozilla/5.0 (X11; Linux 3.5.4-1-ARCH i686; es) KHTML/4.9.1 (like Gecko) Konqueror/4.9

Targets

    • Target

      Set-up.exe

    • Size

      136.2MB

    • MD5

      df14d372ecdd495127d1c3950b4a4c9c

    • SHA1

      384e35f8f938b27ea2f4b97afc798a25b67ae853

    • SHA256

      99c80e54400e52454d0f52f294a7b05b8e05386e4a2e9007f41393fee0654cf8

    • SHA512

      a7b980adfb7ad369538743c408ee5df557d50c698fd1000aaf702c29a9b16905526287d1e8f840335834945dba776247323b83a730019aa39940bac23d2d0659

    • SSDEEP

      196608:jjrU7vglcF8zp0zKmSMc8lhjjk3D1GMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGMl:jRyDSMxfoTr

    Score
    10/10
    vidar97b92d10859a319d8736cd53ff3f8868stealer
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks