General
-
Target
2248-1079-0x000000000042161D-mapping.dmp
-
Size
667KB
-
MD5
559fff8d38c8bb6af1667866804e6044
-
SHA1
0f35ff920bf1f81b598f77e5fac615c9d301dfbb
-
SHA256
c50aa722c4e4a787ee9929fc11a1804efd0801a1f7b1d730d27888b1ffa7db23
-
SHA512
82848d335b4802a496115a99b0c8049ea8b0d048f6556c4c049ca2353251e9383e7682600771bb230c6d75dc6f11b438187af8896a0f9da8645d52a3e9f98b01
-
SSDEEP
12288:LjSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXK:L2nttOMZHAqws2nttOMZHNqwa
Malware Config
Extracted
Family
vidar
Version
54.9
Botnet
517
C2
https://t.me/larsenup
https://ioc.exchange/@zebra54
Attributes
-
profile_id
517
Signatures
-
Vidar family
Files
-
2248-1079-0x000000000042161D-mapping.dmp