General

  • Target

    1676-55-0x0000000000830000-0x000000000128A000-memory.dmp

  • Size

    648KB

  • MD5

    a19ea399c14ffd2577bb04174b518600

  • SHA1

    07783b0bc0bc9d53134b1328781e9845e8cdf4bb

  • SHA256

    64efdcf66e63afdac3e6893a2b85ab5c2c64e11b6bea5797e1305ace36d0c001

  • SHA512

    3b1aa811b780d358878183778b2239d95a4bd7a561c18e64eec493a2bdcede65bb635203b856bc9a44c9413395d46de7d7d587f2b84d4dc3c325008de474108c

  • SSDEEP

    12288:5Ky45KFfLCKCUkuMYUFIqdAxvaj9Gw+g7Oiq+6PBKsrBh:5R4EFfuikbRFyhakVgih

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.6

Botnet

1604

C2

https://t.me/misteryworldismyhome

https://t.me/montgomerywavesgetlucky

Attributes
  • profile_id

    1604

Signatures

Files

  • 1676-55-0x0000000000830000-0x000000000128A000-memory.dmp
    .exe windows x86


    Headers

    Sections