General

  • Target

    3472-949-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    77a52ebaf7483eb6e56ffc98e55beb70

  • SHA1

    aa9802b5937fd439c506ef1ad1e56ec017f03446

  • SHA256

    3da6ccbf5f7984e0dca4e92cf5a9792c4b502e87e3572ed6546cfc600e43d6c6

  • SHA512

    eafd11eb1f8171ec69f755d37c337e9bf1820e04118302c0a6f32fa57d0060515ba64cd3f7a6d0a9b42250a0e581b9627fe2ebc75a97d8ae6e0b280b709f51f4

  • SSDEEP

    12288:sjSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXp:s2nttOMZHAqws2nttOMZHNqwZ

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 3472-949-0x000000000042161D-mapping.dmp