General

  • Target

    4952-1034-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    23fca25aefb0ac7f944e9a34dcd559f1

  • SHA1

    f0298d383a2b53408b8afebc64761ecfd3b21fd7

  • SHA256

    879e01d592a6ea86b20ccbca60a95b82b813d5257ca548754359c8d36f71cf8e

  • SHA512

    93cdef1bd90bda4f3e340ae14f7267d7fbbac2f13c8735139b374f97fa67bde6d5061d5c6015b6b2e9d190c8dcacb64ecce414d3073217a24a99f28c72131419

  • SSDEEP

    12288:fjSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXV:f2nttOMZHAqws2nttOMZHNqwF

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 4952-1034-0x000000000042161D-mapping.dmp