General

  • Target

    1732-991-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    8f203319fe4d47cad451539c8f88d51d

  • SHA1

    9fb6e261fcd733f613b3d033a72510cd9d163564

  • SHA256

    afe555a6bc5d8ba96c6ae42a2d47859fc6a6b3f092a04832ddfb1b4adc4ecd93

  • SHA512

    17111a6a4abb046a7bf27fa58d0c40f7e5a8fd7a71a93bde6f45aabfd7bfb64b0e67ecf33ff01d0af8fea050f703c5e5445942b5efc8d94b591629dfe3f06793

  • SSDEEP

    12288:3jSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXb:32nttOMZHAqws2nttOMZHNqwL

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 1732-991-0x000000000042161D-mapping.dmp