General

  • Target

    3628-942-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    af160893f871056caca3c93549fe0783

  • SHA1

    9d4a6901854ed75bcada090d6d9f2ea88c312137

  • SHA256

    60891614ff6c1a6b1034dddbd8909167769da1e908aacd0f5ead4885d2a4e674

  • SHA512

    da28d73867988f785c6687cd9c4b5efb8826ed5f41e3ed68f556abeb982b5dcbc2c566db1ed18f571c26c44de7d4b7bbb89d83e89f2450958ff02cb817fca6bc

  • SSDEEP

    12288:fjSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXg:f2nttOMZHAqws2nttOMZHNqww

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 3628-942-0x000000000042161D-mapping.dmp