General

  • Target

    2628-1347-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    cde812099f089d0151c544b28a6a306e

  • SHA1

    44a8f905c80d69931a62b5bbe3db304cb901f57d

  • SHA256

    cd2b087e9d6dc530293707c05bf3302437ea6c4fc749d655c07fd78a9fa7c375

  • SHA512

    21191d40fc522e2a32dd2f5b9094b57ec291184d885089039fef6b5dd7b9a176791bd52e647d9c23623e65a3546c764bccf804ab8673bcfc70b0953f7750a1ef

  • SSDEEP

    12288:mjSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXL:m2nttOMZHAqws2nttOMZHNqwb

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 2628-1347-0x000000000042161D-mapping.dmp