Overview

overview

10

Static

static

3

fcb0ce5683...18.exe

windows7-x64

10

fcb0ce5683...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fcb0ce5683a593ced6741c531875f823_JaffaCakes118

  • Size

    674KB

  • Sample

    240420-ntqy2agc7s

  • MD5

    fcb0ce5683a593ced6741c531875f823

  • SHA1

    fa87ad5d4b9abb0d15fc5cab3bad94f5f7965c24

  • SHA256

    5be3e14363b05b17973b59ce33440c7ed514ae86c7b7c53f6cd2304edcd8c839

  • SHA512

    5c1d2e1f05c4f281ac3854f2bd6981614da32a214defdf49ca75295dc4c8a8dd274c5a2bdcaf6d35ac5c22a46de071e85175c4aa3784d8cfb61cd27248f3d0fa

  • SSDEEP

    12288:vytUz+B1IJ2kkSGqq6X262n2dIN7w/RH3cQR2UtGL1D0sg:jzk1PtENmNk/BfRGxD0

Score
10/10
vidar818stealer

Malware Config

Extracted

Family

vidar

Version

39.8

Botnet

818

C2

https://xeronxikxxx.tumblr.com/

Attributes
  • profile_id

    818

Targets

    • Target

      fcb0ce5683a593ced6741c531875f823_JaffaCakes118

    • Size

      674KB

    • MD5

      fcb0ce5683a593ced6741c531875f823

    • SHA1

      fa87ad5d4b9abb0d15fc5cab3bad94f5f7965c24

    • SHA256

      5be3e14363b05b17973b59ce33440c7ed514ae86c7b7c53f6cd2304edcd8c839

    • SHA512

      5c1d2e1f05c4f281ac3854f2bd6981614da32a214defdf49ca75295dc4c8a8dd274c5a2bdcaf6d35ac5c22a46de071e85175c4aa3784d8cfb61cd27248f3d0fa

    • SSDEEP

      12288:vytUz+B1IJ2kkSGqq6X262n2dIN7w/RH3cQR2UtGL1D0sg:jzk1PtENmNk/BfRGxD0

    Score
    10/10
    vidar818stealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks