General

  • Target

    2964-925-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    af54170cf16b6adeaf514c4a833c0986

  • SHA1

    45ff282bd8aa6935742f543d750b97beea0557f8

  • SHA256

    62781c58c4f78f2f87a23eb553da3b9b22dad3ab65c95dc4de7ff53e9fb954ce

  • SHA512

    23732789dc77dde164742c3a9ec21edbc642e4ec7e8961dfe163fa01e6ffb080c7def56876b0cb5eb8e01a46dbcbaaa362ba93a061f64603bb9e134eba371b7a

  • SSDEEP

    12288:FjSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXs:F2nttOMZHAqws2nttOMZHNqw8

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 2964-925-0x000000000042161D-mapping.dmp