General

  • Target

    524-81-0x0000000000400000-0x0000000000DD5000-memory.dmp

  • Size

    9.8MB

  • MD5

    dcd2ca47735330e529a0de109c76261c

  • SHA1

    54b3890873697020b53075f659f37acc3e78c81a

  • SHA256

    ced62d40132719908dc20527d3d343ff19f5cbdfeff6ccc9426d728ad9576e0b

  • SHA512

    6b77abf6fd372c1fed3d48f7d507c1dcb27534e1ced2180a2b691438efb58bf33fec3b7f16c233a01b581bcd1be76d6e46d4bfed25a0b0931449c7386d8f77a8

  • SSDEEP

    196608:8XaGomGb1mFFogTHsrSPl88OU9cJqNEMj5wkhpq8cxB636ndBYdfRC:8XabbkoqsrM8eMqNEM6yqsKnd6

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.6

Botnet

1531

C2

https://t.me/huobiinside

https://mas.to/@kyriazhs1975

Attributes
  • profile_id

    1531

Signatures

Files

  • 524-81-0x0000000000400000-0x0000000000DD5000-memory.dmp
    .exe windows x86


    Headers

    Sections