General

  • Target

    4684-1269-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    cd21ce6ee457f6a00cec2223536b1000

  • SHA1

    bc50780436b305fbe3a271bb7178b02408de2d75

  • SHA256

    630df45c40a2c2091543d213634c32ff1deed03577074985744f659f920d2ca3

  • SHA512

    fa69fe80a82cf7d586442925211e01a049ac93d4833a1d4c7361abe69d3715c5fb339df181d5f84f3446f81e5849de35f1e407ff7db812e0775edf20845131ac

  • SSDEEP

    12288:2jSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXr:22nttOMZHAqws2nttOMZHNqw7

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 4684-1269-0x000000000042161D-mapping.dmp