Overview

overview

10

Static

static

3

a84a527c44...9c.exe

windows7-x64

10

a84a527c44...9c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a84a527c4444287e412b4ab44bc63c9c

  • Size

    606KB

  • Sample

    240227-ftbv4shd8y

  • MD5

    a84a527c4444287e412b4ab44bc63c9c

  • SHA1

    f1319320c69c6bfc4e7e6d82783b0bd6da19d053

  • SHA256

    5f482c3724bfbe5e7b934e2e48dcc2026ab35667d960a1c9ba3779165f594916

  • SHA512

    a87ee15748adb35c49796a7a7e717aafecccfd1f3916f3f15cd350efc4945daee6930d53f5e072e05d169d302fa1c9bde5d4cb61289bfb56f09e9512efe2bbf4

  • SSDEEP

    12288:SgGfKHIgULLQa2Racdzu5yWwzhuGYfziYFqq6MEkrR7WRcoS0eZ9l6VkL4zVq/ry:nHLUNtkpxtuh+YFtEkrZI2ZX4y2

Score
10/10
vidar937stealer

Malware Config

Extracted

Family

vidar

Version

40.1

Botnet

937

C2

https://eduarroma.tumblr.com/

Attributes
  • profile_id

    937

Targets

    • Target

      a84a527c4444287e412b4ab44bc63c9c

    • Size

      606KB

    • MD5

      a84a527c4444287e412b4ab44bc63c9c

    • SHA1

      f1319320c69c6bfc4e7e6d82783b0bd6da19d053

    • SHA256

      5f482c3724bfbe5e7b934e2e48dcc2026ab35667d960a1c9ba3779165f594916

    • SHA512

      a87ee15748adb35c49796a7a7e717aafecccfd1f3916f3f15cd350efc4945daee6930d53f5e072e05d169d302fa1c9bde5d4cb61289bfb56f09e9512efe2bbf4

    • SSDEEP

      12288:SgGfKHIgULLQa2Racdzu5yWwzhuGYfziYFqq6MEkrR7WRcoS0eZ9l6VkL4zVq/ry:nHLUNtkpxtuh+YFtEkrZI2ZX4y2

    Score
    10/10
    vidar937stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks