Overview

overview

10

Static

static

3

f814787dc2...18.exe

windows7-x64

10

f814787dc2...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f814787dc23674ce19d052d524afbda7_JaffaCakes118

  • Size

    591KB

  • Sample

    240418-qlhzkafd2x

  • MD5

    f814787dc23674ce19d052d524afbda7

  • SHA1

    8ae656a5b5bd96d303d7d2c0bce260949e28935c

  • SHA256

    8ca29bd0a3aa15f6f3e8cf4c978dbfd21fee8362d21cf8c7acbde47ce391bcfd

  • SHA512

    d2f175882d6ed7d0d98672fd723d24d372d830d64ff67271734eb8a0dfd821b417a8fe3dee32df085e97af4d39c2a3a5a5bd0601f0ecf45f863e1c26a87e5a72

  • SSDEEP

    12288:FOtHb15cnMbk8hp3QJ/U3E1DI7MznBPAi:FOtH3cnM1hp3QVU0mkBPA

Score
10/10
vidar818stealer

Malware Config

Extracted

Family

vidar

Version

39.7

Botnet

818

C2

https://shpak125.tumblr.com/

Attributes
  • profile_id

    818

Targets

    • Target

      f814787dc23674ce19d052d524afbda7_JaffaCakes118

    • Size

      591KB

    • MD5

      f814787dc23674ce19d052d524afbda7

    • SHA1

      8ae656a5b5bd96d303d7d2c0bce260949e28935c

    • SHA256

      8ca29bd0a3aa15f6f3e8cf4c978dbfd21fee8362d21cf8c7acbde47ce391bcfd

    • SHA512

      d2f175882d6ed7d0d98672fd723d24d372d830d64ff67271734eb8a0dfd821b417a8fe3dee32df085e97af4d39c2a3a5a5bd0601f0ecf45f863e1c26a87e5a72

    • SSDEEP

      12288:FOtHb15cnMbk8hp3QJ/U3E1DI7MznBPAi:FOtH3cnM1hp3QVU0mkBPA

    Score
    10/10
    vidar818stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks