Analysis
-
max time kernel
140s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-12-2024 21:11
General
-
Target
1D30.exe
-
Size
360KB
-
MD5
64c1336fcfe148773b61a2fc1f9384ce
-
SHA1
deb9ccd967564d2210634bfed1cd3ac53c3c12f5
-
SHA256
fd594ed8a9739eb4b729de2eeb89cbe5d41f4ed0869ead5105a7caa880077803
-
SHA512
e7b5ce208e31a2e94c8c87b6f46c7597934d9828b1d4967398be2b7c44a3c158a09b4c1ae34bb48d06781f7249b180e413c6b0ef7744af6153b29f8288bad4f7
-
SSDEEP
6144:UCihgUSTAehRC+gc9fxo8YwGgImF6LqPw3eEu:UCihgUSTAehRFgc9e+Eqog
Score
10/10
Malware Config
Extracted
Family
vidar
Version
52.1
Botnet
937
C2
https://t.me/verstappenf1r
https://climatejustice.social/@ronxik312
Attributes
-
profile_id
937
Signatures
-
Vidar
Vidar is an infostealer based on Arkei stealer.
-
Vidar family
-
Vidar Stealer 5 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1D30.exe"C:\Users\Admin\AppData\Local\Temp\1D30.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
308KB
-
Filesize
324KB
-
Filesize
1024KB
-
Filesize
39.5MB
-
Filesize
308KB
-
Filesize
324KB