General

  • Target

    2248-1079-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    559fff8d38c8bb6af1667866804e6044

  • SHA1

    0f35ff920bf1f81b598f77e5fac615c9d301dfbb

  • SHA256

    c50aa722c4e4a787ee9929fc11a1804efd0801a1f7b1d730d27888b1ffa7db23

  • SHA512

    82848d335b4802a496115a99b0c8049ea8b0d048f6556c4c049ca2353251e9383e7682600771bb230c6d75dc6f11b438187af8896a0f9da8645d52a3e9f98b01

  • SSDEEP

    12288:LjSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXK:L2nttOMZHAqws2nttOMZHNqwa

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 2248-1079-0x000000000042161D-mapping.dmp