General

  • Target

    1676-215-0x0000000000400000-0x000000000146C000-memory.dmp

  • Size

    16.4MB

  • MD5

    dec289bc09b8c3f84c561784b3d008be

  • SHA1

    29f3c13e3411189e36b79456b28141a42fb89dd1

  • SHA256

    2203a30fddc99bc2a061136458c45f8386f5582523803090c151e7b06b155ec7

  • SHA512

    8e59a998a86660ca2c28084ffbeae60121d2881cdeff5b6f90f13850d8d499245a4292b3b8fbc611db36f2352a2b0800c481eb23fb50e91b628abcd47842b5d2

  • SSDEEP

    12288:CPy+9p2HD970QYzfemkdBSUjmtiV+h2CtY//7cHHlSu2XvRFjZ4xh9FaoLRm/Jzr:CPZiD9UemkeFau2gY//An4j5Fyu5B+

Score
10/10

Malware Config

Extracted

Family

vidar

Version

39.8

Botnet

706

C2

https://xeronxikxxx.tumblr.com/

Attributes
  • profile_id

    706

Signatures

  • Vidar Stealer 1 IoCs
  • Vidar family

Files

  • 1676-215-0x0000000000400000-0x000000000146C000-memory.dmp
    .exe windows x86


    Headers

    Sections