General

  • Target

    668-976-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    2624f70458902902312bcca574f22fae

  • SHA1

    b17b88098d5afc8946aab8c1d89503fbfe19769a

  • SHA256

    25e13cb0af00e6948c88e0a40b4aa7c9019906846ca9c0ce18962c4bc811e9f4

  • SHA512

    5ff64b119905f0cf812f43fc3aac9b7e11e2de062d48ce288358ce849bb2338c383b9cb827e05b27a7a7e35df5c783ab027f2fb8a91484938e888a5cb4c490f6

  • SSDEEP

    12288:bjSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXe:b2nttOMZHAqws2nttOMZHNqwu

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 668-976-0x000000000042161D-mapping.dmp