General

  • Target

    4620-943-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    24118998913c9417899ffb0399289dad

  • SHA1

    f35278b03d46d98ba563b21fab9c1b82b1571204

  • SHA256

    c9e0aa90caaf9aab0c58289aa01b5ccd97cb84577886ed941ea0a1530ee3f541

  • SHA512

    1f70999b22577ee6ab01253904314d10f2dfd9131215e99beac21dc42f8d0cb1db80dcc885171ab1f035447c78043ecfe60492b680bb1bf805dc5bef4fc0eef6

  • SSDEEP

    12288:FjSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXh:F2nttOMZHAqws2nttOMZHNqwR

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 4620-943-0x000000000042161D-mapping.dmp