General

  • Target

    5092-596-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    6a87705296c762ed65c00e3ff0056141

  • SHA1

    309aef46e7e8088a09ed8a624c59460b8accf540

  • SHA256

    7e21492f6f932ad5f828eab24c6fdb0d98f086c22702a55b4e3309a706345f4b

  • SHA512

    7b1455021d87994078f096fc8b8998440f18060afecdd623832e50aafd6b6a6d6bd31ba0e2069fd89606bc14e60b517afebd1c1dd2f37f75c3f7b1172b7dc9e5

  • SSDEEP

    12288:FjSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXu:F2nttOMZHAqws2nttOMZHNqwe

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 5092-596-0x000000000042161D-mapping.dmp