Overview

overview

10

Static

static

3

d50097d695...98.exe

windows7-x64

10

d50097d695...98.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d50097d6958be4525d7554a78411a598

  • Size

    649KB

  • Sample

    240319-c4qv8sfb88

  • MD5

    d50097d6958be4525d7554a78411a598

  • SHA1

    ff32c1dc465e7dfedcd8aaebd629653b43abe552

  • SHA256

    885695b560ae2088db6949713a6313d927e3313d668d9d287f63bf01290ce8a6

  • SHA512

    36218c14cc16db7c469ee4fe3342855a6cf88ec09bb11871f6610ffcc55aa34381fb3e618b08493c6c57f24ca571d8b5cb8c5562e85cec46059f9796c4bfb91f

  • SSDEEP

    12288:uid5KuQ99W9OFH4Fk2TnQIi4lMPjWfQBg9RJdKUTY2GtMAGsVYjunjsHL:3vTQS8sQU6VgVs2Gxqr

Score
10/10
vidar916stealer

Malware Config

Extracted

Family

vidar

Version

40

Botnet

916

C2

https://lenak513.tumblr.com/

Attributes
  • profile_id

    916

Targets

    • Target

      d50097d6958be4525d7554a78411a598

    • Size

      649KB

    • MD5

      d50097d6958be4525d7554a78411a598

    • SHA1

      ff32c1dc465e7dfedcd8aaebd629653b43abe552

    • SHA256

      885695b560ae2088db6949713a6313d927e3313d668d9d287f63bf01290ce8a6

    • SHA512

      36218c14cc16db7c469ee4fe3342855a6cf88ec09bb11871f6610ffcc55aa34381fb3e618b08493c6c57f24ca571d8b5cb8c5562e85cec46059f9796c4bfb91f

    • SSDEEP

      12288:uid5KuQ99W9OFH4Fk2TnQIi4lMPjWfQBg9RJdKUTY2GtMAGsVYjunjsHL:3vTQS8sQU6VgVs2Gxqr

    Score
    10/10
    vidar916stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks