General

  • Target

    4860-886-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    3a7920c498e62741eac8a5c68851af80

  • SHA1

    671bb1e8b88a0bc5c518c4136b853795adebd464

  • SHA256

    59a5d145315e3458bf79601554940f40cd5a12d0603a87b276ed1f8d4bd50417

  • SHA512

    d3cd835477a62955906a7ef874e9f66cc8d1551752bb7ca3dc21ce5efeee34953d35dcc4925a39cba04dbe17931fa5d878bdc6f1c39b6c0c1c868e5ad1e25dc5

  • SSDEEP

    12288:OjSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXv:O2nttOMZHAqws2nttOMZHNqwf

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 4860-886-0x000000000042161D-mapping.dmp