Analysis
-
max time kernel
20s -
max time network
23s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
-
submitted
11-11-2024 12:27
General
-
Target
setup.exe
-
Size
2.7MB
-
MD5
ff461f6e26216dea2575082406f0be8a
-
SHA1
5f53eb73469d2770308c248b3379c67cdb731f26
-
SHA256
65046cfd956eb010ea8b5a530e0655cacaa183053ac15dd05003dc0e55904b79
-
SHA512
b6fbd71229e063433794ab99acd410ec9047f8f504450f19b2b19327bf189da8862c7052df91f97cfe598a03ef4aabe123af8ad378f74294298fcb512dba50d1
-
SSDEEP
49152:prGXefgOmE43F2iHV85Sp26Kn866cu3k1zj8DT++x:dNmE43F2iH+JQ3k1zj82+x
Score
10/10
Malware Config
Extracted
Family
vidar
Version
54.7
Botnet
1375
C2
https://t.me/trampapanam
https://nerdculture.de/@yoxhyp
http://5.161.21.185:80
Attributes
-
profile_id
1375
Signatures
-
Vidar
Vidar is an infostealer based on Arkei stealer.
-
Vidar family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup.exe"C:\Users\Admin\AppData\Local\Temp\setup.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
380KB
-
Filesize
2.8MB
-
Filesize
380KB