General
-
Target
4860-886-0x000000000042161D-mapping.dmp
-
Size
667KB
-
MD5
3a7920c498e62741eac8a5c68851af80
-
SHA1
671bb1e8b88a0bc5c518c4136b853795adebd464
-
SHA256
59a5d145315e3458bf79601554940f40cd5a12d0603a87b276ed1f8d4bd50417
-
SHA512
d3cd835477a62955906a7ef874e9f66cc8d1551752bb7ca3dc21ce5efeee34953d35dcc4925a39cba04dbe17931fa5d878bdc6f1c39b6c0c1c868e5ad1e25dc5
-
SSDEEP
12288:OjSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXv:O2nttOMZHAqws2nttOMZHNqwf
Malware Config
Extracted
Family
vidar
Version
54.9
Botnet
517
C2
https://t.me/larsenup
https://ioc.exchange/@zebra54
Attributes
-
profile_id
517
Signatures
-
Vidar family
Files
-
4860-886-0x000000000042161D-mapping.dmp