General

  • Target

    1180-396-0x000000000042094D-mapping.dmp

  • Size

    646KB

  • MD5

    de629eb709949cd267d094521d2544da

  • SHA1

    023bb2d054606787b6f2c2fdd969f7523cef6dd7

  • SHA256

    bf527478a93ea1b35a7af2d204fa3b65c8a10c22f22e9295c6d0f9db7163a2b4

  • SHA512

    5559d83fbe621806377c1071e0bd5590f7bf2199f9864d121e95fc76a90a6cb6ff0e09ed2ebdceb443d29de1848914df7a26dbb805e0933b04573f9c5ef5c484

  • SSDEEP

    12288:byuuxfl0PumDtiy6uyAyvryuuxfl0PumDtiy6jyAyMG:byu6fqPumDl6RZryu6fqPumDl6umG

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.6

Botnet

517

C2

https://t.me/huobiinside

https://mas.to/@kyriazhs1975

Attributes
  • profile_id

    517

Signatures

Files

  • 1180-396-0x000000000042094D-mapping.dmp