General

  • Target

    4752-924-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    1e8890fdef22e4c159afdf51b5df9985

  • SHA1

    ce7cd74f9a79b4c0ea0ed213488021a5e76e7b05

  • SHA256

    06741caa4818a404f0fbdcdf64d1ed4848928c1f4f6ff5b6f1dffc47d84b08e1

  • SHA512

    dce98ce0123530fb01d2762f91829442f27cd9debf04c5f0e2cdfd1740452c5ac28aea4f6296beb00865aed1ce7fe22e68fee4091f43015a4348eac87d687dab

  • SSDEEP

    12288:2jSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXp:22nttOMZHAqws2nttOMZHNqwZ

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 4752-924-0x000000000042161D-mapping.dmp