General

  • Target

    2612-886-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    0da5e6c63c68c661262e02616100b680

  • SHA1

    0f4ad3645a031d97e09a808f1a71156850d760ae

  • SHA256

    b8fb62d27a986bd327e1e3e048d8c7f5a220e5ace969a9ce174ded8f43a8d246

  • SHA512

    1e6ec2ec2bda87e8676551a41d1af3ebc884c2ec5450bb68881f5d4ea79452c3c85155212dca98bcb373e073bbddf53a76fc74460a3302da9d1bc37dd76c2b69

  • SSDEEP

    12288:ijSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXK:i2nttOMZHAqws2nttOMZHNqwa

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 2612-886-0x000000000042161D-mapping.dmp