Overview

overview

10

Static

static

3

a6f08a3f8e...6c.exe

windows7-x64

10

a6f08a3f8e...6c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33e6e06515c05a29bd0164eacffabdfdae5ddfcfbdcdd8b0634fec2d21df760b

  • Size

    160KB

  • Sample

    240417-qqkc7aba5t

  • MD5

    4d495b2f313df75609d768093598208f

  • SHA1

    b89ae2fd9b7bc56a6b56c72c3ddf416e201e6c1d

  • SHA256

    33e6e06515c05a29bd0164eacffabdfdae5ddfcfbdcdd8b0634fec2d21df760b

  • SHA512

    23429af39120b7fb3d75d27cba7ce93bcc115800b32de8cbd1a5b70c5c8c0bc522a25ca3188b9363bb2fa8ddfb4a630c8b2ec99f41f92eb3c15c01dbbcde3887

  • SSDEEP

    3072:d/gUa1OxyrkdkAqpKlXEtXCMQ3jLdBAB7GzCC4E0ca10L9a9+:tKIdkAqpKZ13jLfATfbcaCL9a9+

Score
10/10
vidar438c7562661d92141bb0adbe01c2fc5fstealer

Malware Config

Extracted

Family

vidar

Version

8

Botnet

438c7562661d92141bb0adbe01c2fc5f

C2

https://steamcommunity.com/profiles/76561199644883218

https://t.me/neoschats
Attributes
  • profile_id_v2

    438c7562661d92141bb0adbe01c2fc5f

  • user_agent

    Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78

Targets

    • Target

      a6f08a3f8e1a8c2bbc982aaa662992c1d7400443e474f622d682d38ed7148d6c.exe

    • Size

      210KB

    • MD5

      57359f1a71b3c9f2e76631a70fc99aaf

    • SHA1

      8f11248f7e18e8196d1bad3b00d17d22149ecf05

    • SHA256

      a6f08a3f8e1a8c2bbc982aaa662992c1d7400443e474f622d682d38ed7148d6c

    • SHA512

      feda82b26dd483e9b6f1c4be35b23d4c011dbe3403f39beb4368fe62d07d4f2b16f80546ef49597766b1e86f8a03076efcab8f7b5cdf51b087a91e56a95754f3

    • SSDEEP

      3072:uDineOw9UM7uGMjlXSDDG17S+/uD/jrumkLa7rIzHInk2Sv1fo:rneOGUrlyG12qQ/MzoVm

    Score
    10/10
    vidar438c7562661d92141bb0adbe01c2fc5fstealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks