Overview

overview

10

Static

static

3

a945644533...69.exe

windows7-x64

10

a945644533...69.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a945644533a405a16423fbf5b9a37069

  • Size

    544KB

  • Sample

    240227-qqb2taad9y

  • MD5

    a945644533a405a16423fbf5b9a37069

  • SHA1

    30b820799eb4e5e5421ef14cd3f2a87f8288fe46

  • SHA256

    a5483d1124967a58176f75409270ba071fe0f2f337ffd3b106659852565502f0

  • SHA512

    40f82c67d52b1b960d1097cdbc6801d2f5ba3dd20ac62d8dd3055aaf55392744c9e4a4b595fb62d37f69ca7a833158e2c15e36e1c3a53e3576a4a6326ead18ed

  • SSDEEP

    12288:V2VRggveXe6UvZRLGkWVx30BwQTvwAW8aLlcCO1Xnmi:V2VygmZYZRL8xiwQzW8TXmi

Score
10/10
vidar916stealer

Malware Config

Extracted

Family

vidar

Version

40

Botnet

916

C2

https://lenak513.tumblr.com/

Attributes
  • profile_id

    916

Targets

    • Target

      a945644533a405a16423fbf5b9a37069

    • Size

      544KB

    • MD5

      a945644533a405a16423fbf5b9a37069

    • SHA1

      30b820799eb4e5e5421ef14cd3f2a87f8288fe46

    • SHA256

      a5483d1124967a58176f75409270ba071fe0f2f337ffd3b106659852565502f0

    • SHA512

      40f82c67d52b1b960d1097cdbc6801d2f5ba3dd20ac62d8dd3055aaf55392744c9e4a4b595fb62d37f69ca7a833158e2c15e36e1c3a53e3576a4a6326ead18ed

    • SSDEEP

      12288:V2VRggveXe6UvZRLGkWVx30BwQTvwAW8aLlcCO1Xnmi:V2VygmZYZRL8xiwQzW8TXmi

    Score
    10/10
    vidar916stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks