General

  • Target

    4276-1123-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    b8b5cda276a3219d708275b91e62d0b5

  • SHA1

    b5eae244200ba449670c5787327f2f9c809cd8c5

  • SHA256

    ce57dbc7e05e3cf61ae86cbe07e9fb21e1c375583abcdc75cc4f130d125f4a98

  • SHA512

    adc8c26279be1231883dd9a58e5a0c2d0cd5ac701ad964e277affdffac9331ebc4897d3ef29f87d8c007cae86eebbd7b03c85284286d20a2ca17a40168991a14

  • SSDEEP

    12288:ujSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXn:u2nttOMZHAqws2nttOMZHNqwX

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 4276-1123-0x000000000042161D-mapping.dmp