Overview

overview

10

Static

static

3

f022cea493...18.exe

windows7-x64

10

f022cea493...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f022cea493e3e02c8306eec643c05aa6_JaffaCakes118

  • Size

    655KB

  • Sample

    240415-deay6acg92

  • MD5

    f022cea493e3e02c8306eec643c05aa6

  • SHA1

    bff5457dcde3ffab1e594af352eff481aa33ca9a

  • SHA256

    28c2e87ec7bb8ee5ad0fae20c6f99a53dd543d3835c830f8535fde3991076c38

  • SHA512

    39cc7573d09716406efb02e449d755c48a2e46b6b4bf9651d1a35407ae520688ec773f1a158717ca66ac28937970d3c15c066eb0e28f4bed17cd57d21f642f2f

  • SSDEEP

    12288:XQllXv6/cPrLoYA+cGkl8rGS+vTV+6Cx8wJTD9ThNGbVrrDS2Ay:AP/6/IFISGSo6p6HD

Score
10/10
vidar916stealer

Malware Config

Extracted

Family

vidar

Version

40

Botnet

916

C2

https://lenak513.tumblr.com/

Attributes
  • profile_id

    916

Targets

    • Target

      f022cea493e3e02c8306eec643c05aa6_JaffaCakes118

    • Size

      655KB

    • MD5

      f022cea493e3e02c8306eec643c05aa6

    • SHA1

      bff5457dcde3ffab1e594af352eff481aa33ca9a

    • SHA256

      28c2e87ec7bb8ee5ad0fae20c6f99a53dd543d3835c830f8535fde3991076c38

    • SHA512

      39cc7573d09716406efb02e449d755c48a2e46b6b4bf9651d1a35407ae520688ec773f1a158717ca66ac28937970d3c15c066eb0e28f4bed17cd57d21f642f2f

    • SSDEEP

      12288:XQllXv6/cPrLoYA+cGkl8rGS+vTV+6Cx8wJTD9ThNGbVrrDS2Ay:AP/6/IFISGSo6p6HD

    Score
    10/10
    vidar916stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks