General

  • Target

    b217b6eb7387c55e0787b3badf630165

  • Size

    655KB

  • Sample

    240304-pd8dtaba68

  • MD5

    b217b6eb7387c55e0787b3badf630165

  • SHA1

    78ce860e4a5c2403383dae80cc01528c5a27f638

  • SHA256

    b97a093f2b560eba500705d93b37864c64f5d8143fd9b694e753b1033b1cadaf

  • SHA512

    3f8416a188f944a326f794a0d758b8a632204fabf94aeb2d774483c6259a15b750a3d8ad7103b1ffbfab861769fa474a234d8d6c890ecf96ffb895c6088ecc38

  • SSDEEP

    12288:8QtcXXSfdp/hp6+cOk1fg4UmnyPNUMXovg/DuDLWGoRy:XenSfHDignSyPKMXoo7uDqGV

Score
10/10

Malware Config

Extracted

Family

vidar

Version

40

Botnet

937

C2

https://lenak513.tumblr.com/

Attributes
  • profile_id

    937

Targets

    • Target

      b217b6eb7387c55e0787b3badf630165

    • Size

      655KB

    • MD5

      b217b6eb7387c55e0787b3badf630165

    • SHA1

      78ce860e4a5c2403383dae80cc01528c5a27f638

    • SHA256

      b97a093f2b560eba500705d93b37864c64f5d8143fd9b694e753b1033b1cadaf

    • SHA512

      3f8416a188f944a326f794a0d758b8a632204fabf94aeb2d774483c6259a15b750a3d8ad7103b1ffbfab861769fa474a234d8d6c890ecf96ffb895c6088ecc38

    • SSDEEP

      12288:8QtcXXSfdp/hp6+cOk1fg4UmnyPNUMXovg/DuDLWGoRy:XenSfHDignSyPKMXoo7uDqGV

    Score
    10/10

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks