Overview

overview

10

Static

static

3

d307a9934a...79.exe

windows7-x64

10

d307a9934a...79.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d307a9934a5fd7513c731373c5786579

  • Size

    680KB

  • Sample

    240318-j75xwsch7y

  • MD5

    d307a9934a5fd7513c731373c5786579

  • SHA1

    93d2c4394281156fc6cb1982509d441fe71b5ec0

  • SHA256

    32635b6aa5bcbdd18166e5a9b9469104ccc57a19bfe72dc3e3caca761ebc311a

  • SHA512

    827c258f33ca9f62c86ce98b5b52e088057e4bc2d7cfbeb39782cddadb875545ecbc25945e89385433763655344c286875d86ce1eb2e60db5d5b6f3fc3f4fdaa

  • SSDEEP

    12288:1IDf9akx0SNIQAb8vOOzZf9H70pKpf3klQzoIgWslIg5DIAkhq:y1ak4b8Guf9+GklQhgZlI6I9o

Score
10/10
vidar828stealer

Malware Config

Extracted

Family

vidar

Version

40

Botnet

828

C2

https://lenak513.tumblr.com/

Attributes
  • profile_id

    828

Targets

    • Target

      d307a9934a5fd7513c731373c5786579

    • Size

      680KB

    • MD5

      d307a9934a5fd7513c731373c5786579

    • SHA1

      93d2c4394281156fc6cb1982509d441fe71b5ec0

    • SHA256

      32635b6aa5bcbdd18166e5a9b9469104ccc57a19bfe72dc3e3caca761ebc311a

    • SHA512

      827c258f33ca9f62c86ce98b5b52e088057e4bc2d7cfbeb39782cddadb875545ecbc25945e89385433763655344c286875d86ce1eb2e60db5d5b6f3fc3f4fdaa

    • SSDEEP

      12288:1IDf9akx0SNIQAb8vOOzZf9H70pKpf3klQzoIgWslIg5DIAkhq:y1ak4b8Guf9+GklQhgZlI6I9o

    Score
    10/10
    vidar828stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks