General

  • Target

    5900-994-0x000000000042094D-mapping.dmp

  • Size

    645KB

  • MD5

    a4849409c60fa1183c854923e239d3fc

  • SHA1

    8e0d2107668c768e686844e4832efaae3d961aec

  • SHA256

    223f363ebdc41fb20dd01e904e2096d1c4b23eddf0905d0d9cf3845e5da9a9c1

  • SHA512

    01def5269ad9f546faaaca36040cdd104e874fbf540be29912d8fbba51538e1e4dca3399cdd32ed2f65de2b1ec9cb1b32f6c8c3eb7561eb6542b9e6a5751d823

  • SSDEEP

    12288:kLjsNAzX4Ai6jarSKBLjsNAzX4Ai6j3rSK/:kLjsOzX4ujOZLjsOzX4uj7X

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.7

Botnet

517

C2

https://t.me/trampapanam

https://nerdculture.de/@yoxhyp

Attributes
  • profile_id

    517

Signatures

Files

  • 5900-994-0x000000000042094D-mapping.dmp