General

  • Target

    3164-1140-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    58b463ecd20366b071a1393d2668002a

  • SHA1

    74fbec20a22d49960b15863c5928a7d80572d7f9

  • SHA256

    655154b2bf32ebdb6b5f60c4cb5397dd47ab80cd15336b86f2d698a4dd77f257

  • SHA512

    277cdce8074ca212dc82ceb9ac42d0cccd65b91fdcb76a505d3919d71eb0addf01548b877eebad22ca3228948ecfb57d44c47125046554a1bcd68aa500fc52c3

  • SSDEEP

    12288:njSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXc:n2nttOMZHAqws2nttOMZHNqwM

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 3164-1140-0x000000000042161D-mapping.dmp