Behavioral task
behavioral1
Sample
6040-2226-0x0000000000400000-0x0000000000534000-memory.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
6040-2226-0x0000000000400000-0x0000000000534000-memory.exe
Resource
win10v2004-20220414-en
General
-
Target
6040-2226-0x0000000000400000-0x0000000000534000-memory.dmp
-
Size
1.2MB
-
MD5
25d2624c83272e3902d942fd8b52390c
-
SHA1
428795fcc99e05120599a37445b0008173dc3668
-
SHA256
aa2fe419180832406b0fe699e29431a31ad67926ec65ea1ce9d1054b9330b049
-
SHA512
bdd7de8e92603d3fa089b52a394d74db00e7112d69ec7d807a9cbd3e36cd9c3303a3c9f42d25ae34231edd3c55c59087f27ba569981b5537e591453c35ee62af
-
SSDEEP
24576:UTBB26aWbsphGtkzLQQHqHAphG+u4kreIB6K8den9znhL4:UTBwWwvGKHQQKHAy+u4eeIMK2ethL4
Malware Config
Extracted
vidar
50.7
937
https://ruhr.social/@sam9al
https://koyu.space/@samsa2l
-
profile_id
937
Signatures
Files
-
6040-2226-0x0000000000400000-0x0000000000534000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 541KB - Virtual size: 541KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ