Overview

overview

10

Static

static

3

523beeb57c...c1.exe

windows7-x64

10

523beeb57c...c1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b429422e364136d348c6337e7c69fa1dd8ee5b03db9e2558a13f39f7c70fbed9

  • Size

    185KB

  • Sample

    240417-rjckfabc89

  • MD5

    c70259a6e0c49c86e2771bfa908fc0f5

  • SHA1

    a5eb4feb09753c37f84b0eecf087fd0e6695880e

  • SHA256

    b429422e364136d348c6337e7c69fa1dd8ee5b03db9e2558a13f39f7c70fbed9

  • SHA512

    427521563b50d80f22763c14129593408154928664c9a0fc44e7eebea10ef34458b8b7088485e175b03ce8a76c2065a2ad5d84bfda43bea46c99cf12d18c735a

  • SSDEEP

    3072:ua9KQ/+RlxbW2d/HOd6g506zRLKGpviQIfGmbxYOgPws40PXVcbBOprN5cdt8:LEOwf/8600+9/iBfD9BgPwMXV4BOFNb

Score
10/10
vidar438c7562661d92141bb0adbe01c2fc5fstealer

Malware Config

Extracted

Family

vidar

Version

8

Botnet

438c7562661d92141bb0adbe01c2fc5f

C2

https://steamcommunity.com/profiles/76561199644883218

https://t.me/neoschats
Attributes
  • profile_id_v2

    438c7562661d92141bb0adbe01c2fc5f

  • user_agent

    Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78

Targets

    • Target

      523beeb57c19076e7177e7a016bab52ff21ac5ecbbbafd0b8dc5c8dc5b9d5cc1.exe

    • Size

      303KB

    • MD5

      7ee46544312f9217a04c6ecae3c637b2

    • SHA1

      cb6332410c4d37dd6ce9929cc93adaaeff19ab20

    • SHA256

      523beeb57c19076e7177e7a016bab52ff21ac5ecbbbafd0b8dc5c8dc5b9d5cc1

    • SHA512

      4cfc93c28678f60dba4c143708dd2a25588dfa878fac2630ec80ab5644178bdc7ea7b39173f739e808890da9c5696e5175f77907ba1da0654a6e126660d91c68

    • SSDEEP

      3072:kL6X++3PKOpTpbpav1zakS5Miid0IoPmDj5dzx1U1PB3/EyXW/Q5dTTkW0/V9:c6tPKOxpg9W5MKIoP2dk1PuyScTT90

    Score
    10/10
    vidar438c7562661d92141bb0adbe01c2fc5fstealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks