General

  • Target

    1576-888-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    8382db23b465fd75b89272b19cfe2173

  • SHA1

    08c6f0982621d441a1e2d60b6c7c95b1ab9937af

  • SHA256

    4f2cbc91bb72bad1a51621a6a56f0647687a07af306b1439fd35da416cefafba

  • SHA512

    95cbe62c6bb5228bfa54a17318ec90abca6bcd0d333b685cc0ca1fe271a398d4bfe0311f710ebaa836a77267c9895b11ffcbbdec518b6bdec8ecb15d5360caf0

  • SSDEEP

    12288:jjSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwX+:j2nttOMZHAqws2nttOMZHNqwO

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 1576-888-0x000000000042161D-mapping.dmp