Overview

overview

10

Static

static

10

604c471648...aa.exe

windows7-x64

10

604c471648...aa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    604c471648621880aeceac0534190b14e8c3ea05d4bc5bb95a8e777dd82e65aa_password_infected.zip

  • Size

    140KB

  • Sample

    250204-q7hwpazkak

  • MD5

    7916e182e794eb7c52b2b780cfc62f08

  • SHA1

    2d7758f6078719c73efe2c52715efbaa08e4d6d2

  • SHA256

    dd5b0f407407468318c7f0ecfd538c8dc1788661fbd31d6318e33f199a12fd8c

  • SHA512

    e2cd9896b77ace8550c578499d96b2a71c431036d0186d7517c8f7c6ce001797b9b9070c04a0fb603ca7741954ba054988ebc3479bde4185a99e79a5305ecf93

  • SSDEEP

    3072:kAph7oRBBrXJNc8r8jqLX07gxbRMfL3eu4IQv5AzKP/wz8xVEQuP:RpiDrXprGOXDbKDeJISkKP4z8xVw

Score
10/10
vidardiscoverystealer

Malware Config

Extracted

Family

vidar

C2

https://t.me/m08mbk

https://steamcommunity.com/profiles/76561199820567237
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0

Targets

    • Target

      604c471648621880aeceac0534190b14e8c3ea05d4bc5bb95a8e777dd82e65aa.bin

    • Size

      272KB

    • MD5

      dbdfd9ab774d8fa5a56718b1fae7bc95

    • SHA1

      df4c5c42e6b8d3c7324a34a2b017f362d9213558

    • SHA256

      604c471648621880aeceac0534190b14e8c3ea05d4bc5bb95a8e777dd82e65aa

    • SHA512

      d3478dd32f89105cd62997f539961bb69a7eb08ca614f9185c29a32cb96f3dbc87638fea6eb09717ad67696d5aab1a39373aaddf0fd0c057ea6787346d7a31c8

    • SSDEEP

      3072:ne/3hGz8Su8ucwsy7vf7Qy63S9scCh4slxWsr7i9W3WWsZHpV0iukwEEfzqygF/S:n6xqucZy7vf8f3oMRxb/3W1Hp91Gq

    Score
    10/10
    vidardiscoverystealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks