Overview

overview

10

Static

static

3

bed4a504be...d3.exe

windows7-x64

10

bed4a504be...d3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bed4a504bebb63464581d09f8bc9eed3

  • Size

    672KB

  • Sample

    240310-rqk56aee5s

  • MD5

    bed4a504bebb63464581d09f8bc9eed3

  • SHA1

    02a11cb82f711eda570be207ab1f53a7b49cd6f7

  • SHA256

    773197dfe8b35351242b81c1ba189b2745e2367357b806c9a0529e3bf1495940

  • SHA512

    8f86ab5d38ea3f758c408bbe64c4d21a28ae2e6ac9b51167e71b2f5f83501acce1e756e44c901bdfe250343a188bb2e5e3373582fa50e26a0d8a14a239a3417f

  • SSDEEP

    12288:Pf+jYSwDvC2rApmRVdxQDX9WsS130hm9JLzBar7+7EoN5w:OjdMhVu9Wt9J0+7R

Score
10/10
vidar828stealer

Malware Config

Extracted

Family

vidar

Version

39.8

Botnet

828

C2

https://xeronxikxxx.tumblr.com/

Attributes
  • profile_id

    828

Targets

    • Target

      bed4a504bebb63464581d09f8bc9eed3

    • Size

      672KB

    • MD5

      bed4a504bebb63464581d09f8bc9eed3

    • SHA1

      02a11cb82f711eda570be207ab1f53a7b49cd6f7

    • SHA256

      773197dfe8b35351242b81c1ba189b2745e2367357b806c9a0529e3bf1495940

    • SHA512

      8f86ab5d38ea3f758c408bbe64c4d21a28ae2e6ac9b51167e71b2f5f83501acce1e756e44c901bdfe250343a188bb2e5e3373582fa50e26a0d8a14a239a3417f

    • SSDEEP

      12288:Pf+jYSwDvC2rApmRVdxQDX9WsS130hm9JLzBar7+7EoN5w:OjdMhVu9Wt9J0+7R

    Score
    10/10
    vidar828stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks