8b34e6283a4e30009a0ad792723817cfb0d5cdbbbe119948aa6e887bd59e1620

Target

66bddfcb52736_vidar.bin.zip
Size

187KB
Sample

250111-21xbaatmgz
MD5

a284b21c1e928fe4ede4ddbeddfcd391
SHA1

d5260a53b780a6308c639d2b89116ef5bbe992d7
SHA256

8b34e6283a4e30009a0ad792723817cfb0d5cdbbbe119948aa6e887bd59e1620
SHA512

64ee76b87be812c3c82c5716cd3d7c7065c0522fdbd774b1d745d67ab69a2299df3dd9d52e150188b860c9220435658fb3140f7317ad59a3fac76f864337203a
SSDEEP

3072:6NaGrsZYYgA7AaNGNjF1kTWWdNYArOLE99nkVHr/8J9bykSEN2vvBhat0658GZqa:GSuYvfN+4TZNYAKLGaHb09q0eBIO658W

Score

7^/10

discovery upx

Malware Config

Targets

- Target
  
  66bddfcb52736_vidar.bin.zip
- Size
  
  187KB
- MD5
  
  a284b21c1e928fe4ede4ddbeddfcd391
- SHA1
  
  d5260a53b780a6308c639d2b89116ef5bbe992d7
- SHA256
  
  8b34e6283a4e30009a0ad792723817cfb0d5cdbbbe119948aa6e887bd59e1620
- SHA512
  
  64ee76b87be812c3c82c5716cd3d7c7065c0522fdbd774b1d745d67ab69a2299df3dd9d52e150188b860c9220435658fb3140f7317ad59a3fac76f864337203a
- SSDEEP
  
  3072:6NaGrsZYYgA7AaNGNjF1kTWWdNYArOLE99nkVHr/8J9bykSEN2vvBhat0658GZqa:GSuYvfN+4TZNYAKLGaHb09q0eBIO658W
Score

7^/10

discovery upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Probable phishing domain
- Suspicious use of SetThreadContext
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Phishing

T1566

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

ACProtect 1.3x - 1.4x DLL software

Executes dropped EXE

Loads dropped DLL

Legitimate hosting services abused for malware hosting/C2

Probable phishing domain

Suspicious use of SetThreadContext

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2