General

  • Target

    4900-981-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    f1cf9f6f1ce397ee5c89143bc7561a85

  • SHA1

    c3e1bc29db9affd97fb8c934fb9f6d44a6d8a297

  • SHA256

    a547059542e9053e8733efab1182c230155fa9c0d3798970831b007c4ba8a467

  • SHA512

    3ad5ff3aa0ecbc3e5af357e1cf76453f5dbcb3f10a52097a71cb182dfdd8023023d050494bfaf49144cbf184ff81c0e8feb2b68a8baac5d38ee349fe10d790eb

  • SSDEEP

    12288:AjSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXL:A2nttOMZHAqws2nttOMZHNqwb

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 4900-981-0x000000000042161D-mapping.dmp