Overview

overview

10

Static

static

1

lnslaIIER-Sell-UP.rar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    lnslaIIER-Sell-UP.rar

  • Size

    123.0MB

  • Sample

    240501-s28k9sac61

  • MD5

    0f5f7d6d986f19d77747cd98e2cf6ead

  • SHA1

    848b4f0bb502e8945945bf2ad72bdc3860158f3b

  • SHA256

    a4e33960bbcee35239f45e9bdf67899edfd6bba75ff429558ef8e15505e5ccef

  • SHA512

    5c6de8692925c6f59c262d3b382f4209d30c1280287938619b4250f320f2103793457d1bbb89f379e4540c90dd5f70708f542b064bc603646adf03494c418e50

  • SSDEEP

    3145728:WIYQ8xvaEkz/6HjHOyiM6AQXOflggkOdZKLKBP3ZjA/2W:xIIy/TSgkOdZKLKB9m2W

Score
10/10
vidar97b92d10859a319d8736cd53ff3f8868stealer

Malware Config

Extracted

Family

vidar

Version

7.8

Botnet

97b92d10859a319d8736cd53ff3f8868

C2

http://5.252.118.12:80

https://t.me/voolkisms

https://t.me/karl3on

https://steamcommunity.com/profiles/76561199637071579
Attributes
  • profile_id_v2

    97b92d10859a319d8736cd53ff3f8868

  • user_agent

    Mozilla/5.0 (X11; Linux 3.5.4-1-ARCH i686; es) KHTML/4.9.1 (like Gecko) Konqueror/4.9

Targets

    • Target

      lnslaIIER-Sell-UP.rar

    • Size

      123.0MB

    • MD5

      0f5f7d6d986f19d77747cd98e2cf6ead

    • SHA1

      848b4f0bb502e8945945bf2ad72bdc3860158f3b

    • SHA256

      a4e33960bbcee35239f45e9bdf67899edfd6bba75ff429558ef8e15505e5ccef

    • SHA512

      5c6de8692925c6f59c262d3b382f4209d30c1280287938619b4250f320f2103793457d1bbb89f379e4540c90dd5f70708f542b064bc603646adf03494c418e50

    • SSDEEP

      3145728:WIYQ8xvaEkz/6HjHOyiM6AQXOflggkOdZKLKBP3ZjA/2W:xIIy/TSgkOdZKLKB9m2W

    Score
    10/10
    vidar97b92d10859a319d8736cd53ff3f8868stealer

    • Detect Vidar Stealer

      stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks