Overview

overview

10

Static

static

1

d89c941f24...fb.exe

windows7-x64

10

d89c941f24...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d89c941f24184dae521e0c528d54b0fb

  • Size

    539KB

  • Sample

    240320-mv7shaeh58

  • MD5

    d89c941f24184dae521e0c528d54b0fb

  • SHA1

    389e916b7e91f95ee5bf2a02372897c9626c4a67

  • SHA256

    a2c32c272c564873a80bdfe148ba4a23ca64b821546556e4076923a0db1c931f

  • SHA512

    b2188e04e0aedf7362008bbf20b4e10162c9c932e0f88f0d5109b8f07bad96bbd35b57e118e677213fdccde0a6bacba4c8d27791126b9d8919e3c28aa505bba4

  • SSDEEP

    12288:0YFBtBFov+xOZuX86JY1oowOZ6XxAiVrjJgostVH8V:0PGs8XfeXv6T7YHH8V

Score
10/10
vidar921stealer

Malware Config

Extracted

Family

vidar

Version

39.8

Botnet

921

C2

https://xeronxikxxx.tumblr.com/

Attributes
  • profile_id

    921

Targets

    • Target

      d89c941f24184dae521e0c528d54b0fb

    • Size

      539KB

    • MD5

      d89c941f24184dae521e0c528d54b0fb

    • SHA1

      389e916b7e91f95ee5bf2a02372897c9626c4a67

    • SHA256

      a2c32c272c564873a80bdfe148ba4a23ca64b821546556e4076923a0db1c931f

    • SHA512

      b2188e04e0aedf7362008bbf20b4e10162c9c932e0f88f0d5109b8f07bad96bbd35b57e118e677213fdccde0a6bacba4c8d27791126b9d8919e3c28aa505bba4

    • SSDEEP

      12288:0YFBtBFov+xOZuX86JY1oowOZ6XxAiVrjJgostVH8V:0PGs8XfeXv6T7YHH8V

    Score
    10/10
    vidar921stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar Stealer

      stealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks