General

  • Target

    3516-226-0x0000000000400000-0x00000000004A4000-memory.dmp

  • Size

    656KB

  • MD5

    5249dc677abecb28a13c2ef9c42e9104

  • SHA1

    b4d889abcd6f7a44c55bc51f130e7440a4dc427c

  • SHA256

    1b4c97a648628e8868e377bdb5af33edf31dbe205a303ecdbef002d04d77cefa

  • SHA512

    3dcb0ac3ae11405e9dd1fd38fdd88da8366a83d94997a2744924708af70f5adf718bc1473b65460323ce36d9028582335afa08d6da339734662d3813a3f2b935

  • SSDEEP

    12288:ZPKgRI9H69O0FYaY/bcOwK8e1Vid+CnflALvB6w0a+uXfZVlKd25Ooh9FKALRmVc:ZP/k69a/bcq76tndALvBDXrBVYIO5RV

Score
10/10

Malware Config

Extracted

Family

vidar

Version

39.4

Botnet

933

C2

https://sergeevih43.tumblr.com/

Attributes
  • profile_id

    933

Signatures

  • Vidar Stealer 1 IoCs
  • Vidar family

Files

  • 3516-226-0x0000000000400000-0x00000000004A4000-memory.dmp
    .exe windows x86


    Headers

    Sections