Overview

overview

10

Static

static

10

240-60-0x0...ry.exe

windows7-x64

240-60-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    240-60-0x0000000000210000-0x00000000005B7000-memory.dmp

  • Size

    3.7MB

  • MD5

    0526a3a85757f69766f4c00c09e59e4f

  • SHA1

    f06e0feaf14999d60417e62c7d84c68aa177dd23

  • SHA256

    1b223cdc3cfc154d502705dfc4991e95395d588d077cb6f3b11001ccc468487d

  • SHA512

    1fc4df12a0d9cb3f306723e97aaaa12eff9cc9111684221735a2fc6950b40d6f7ca1d296b7d69cfc833bc8e83ac9ff994b5e74df335e266d28ae5dbbdfa236a8

  • SSDEEP

    49152:7WVgVQyeLHkJkzP+C+CmGFSFsN7dTROWBtKqycr1qH4fHr3h4cwv:7W6feDvP+CnmGFSFsbt0SqSHl4cwv

Score
10/10
themida1679vidar

Malware Config

Extracted

Family

vidar

Version

55

Botnet

1679

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80
Attributes
  • profile_id

    1679

Signatures

  • Vidar family
    vidar
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida

Files

  • 240-60-0x0000000000210000-0x00000000005B7000-memory.dmp
    .exe windows x86


    Headers

    Sections