General
-
Target
1732-991-0x000000000042161D-mapping.dmp
-
Size
667KB
-
MD5
8f203319fe4d47cad451539c8f88d51d
-
SHA1
9fb6e261fcd733f613b3d033a72510cd9d163564
-
SHA256
afe555a6bc5d8ba96c6ae42a2d47859fc6a6b3f092a04832ddfb1b4adc4ecd93
-
SHA512
17111a6a4abb046a7bf27fa58d0c40f7e5a8fd7a71a93bde6f45aabfd7bfb64b0e67ecf33ff01d0af8fea050f703c5e5445942b5efc8d94b591629dfe3f06793
-
SSDEEP
12288:3jSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXb:32nttOMZHAqws2nttOMZHNqwL
Malware Config
Extracted
Family
vidar
Version
54.9
Botnet
517
C2
https://t.me/larsenup
https://ioc.exchange/@zebra54
Attributes
-
profile_id
517
Signatures
-
Vidar family
Files
-
1732-991-0x000000000042161D-mapping.dmp