General

  • Target

    4692-1009-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    e2ec8517598190845a379d1641314424

  • SHA1

    6dcf825500502b22e0593ba86a5aa9bd08a6c5ca

  • SHA256

    16c696a25e3355cb7dc22718697169ec65aaaea1289f4d67668f7299c08c4afa

  • SHA512

    cde5414bb912d9cb9e8fdef338cf5a45137f54a8600323690f32eca9098f9272b01bc44d6c716097c8dbd01b013edcfe174cdd103f5a3659e2298814121461b3

  • SSDEEP

    12288:djSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXr:d2nttOMZHAqws2nttOMZHNqw7

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 4692-1009-0x000000000042161D-mapping.dmp