Overview

overview

10

Static

static

3

0e8fbee0bc...6c.exe

windows7-x64

10

0e8fbee0bc...6c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e8fbee0bc9bf2582c73dbb5c0e58abdeaecb7689f51bf16e888604e329aae6c.zip

  • Size

    161KB

  • Sample

    240402-mdvfvafc33

  • MD5

    0b9dc9e2066310e6f33b846d03910aac

  • SHA1

    f652a0bd9ded50b9b21ba7d349b6d60c368ede98

  • SHA256

    3970365a93d9c1f93414e756ae635f78f144f79991d05d93c45daedab379cc0d

  • SHA512

    fa70a035bce1145f970de1d88efd7d2dda676a76c3449ac723ebc11236b78db614dfd8a96475feb2de8c98cfb2658f2a2bfbe8de83c08c94df691924b0ba8d5c

  • SSDEEP

    3072:sq+7Yn3ovUu8+uxpFH3rzr/dHRK1TM7nL+umROPpoNOkc9k/E9ZwUob+c:3n3ov789xfzFxK1QTZhPp0U6sLwUWz

Score
10/10
vidar438c7562661d92141bb0adbe01c2fc5fstealer

Malware Config

Extracted

Family

vidar

Version

8

Botnet

438c7562661d92141bb0adbe01c2fc5f

C2

https://steamcommunity.com/profiles/76561199644883218

https://t.me/neoschats
Attributes
  • profile_id_v2

    438c7562661d92141bb0adbe01c2fc5f

  • user_agent

    Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78

Targets

    • Target

      0e8fbee0bc9bf2582c73dbb5c0e58abdeaecb7689f51bf16e888604e329aae6c.exe

    • Size

      211KB

    • MD5

      77badd4fd610c2abc079680ca6661f18

    • SHA1

      9d2e4875e509dccf60705a5baf666c4c4a7616d7

    • SHA256

      0e8fbee0bc9bf2582c73dbb5c0e58abdeaecb7689f51bf16e888604e329aae6c

    • SHA512

      7b06fd9db9fe6f637ab50671744172d749b75eadfa5707d25e6c9d0a7adae49ffbe922f582e2f1816d683f1b8a4b0717fc4a10234c7147e4a6e84d6be03ff242

    • SSDEEP

      3072:u8i3u+X+RbpTL/iD37WiZ9pi6Ry9x+5fLUn7TzDPaVYoE:w3u+uRlTrc75i6Ryf+BLUnPzb

    Score
    10/10
    vidar438c7562661d92141bb0adbe01c2fc5fstealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks