Overview

overview

10

Static

static

1

89b55665c7...c2.exe

windows7-x64

10

89b55665c7...c2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    89b55665c76315777e1f2a9a5be784fd2590b917388f657c6f5c2caa055e87c2.exe
  • Size 1.1MB
  • Sample241224-ft2rja1raw
  • SHA256 89b55665c76315777e1f2a9a5be784fd2590b917388f657c6f5c2caa055e87c2
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
vidarcredential_accessdiscoveryspywarestealer

Malware Config

Targets

    • Target
      89b55665c76315777e1f2a9a5be784fd2590b917388f657c6f5c2caa055e87c2.exe
    • Size 1.1MB
    • SHA256 89b55665c76315777e1f2a9a5be784fd2590b917388f657c6f5c2caa055e87c2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    vidarcredential_accessdiscoveryspywarestealer

    • Detect Vidar Stealer

      stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar family

      vidar

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

      credential_accessstealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates processes with tasklist

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks