General

  • Target

    3672-1015-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    a3528620462bbef711775d6ad57aaad3

  • SHA1

    91bc8876ea75c718ef61d3eff201582d1897edfa

  • SHA256

    fba30b7874cc77068121b84d4dd3b940bcd8e677cf0f91fc8a7b73fdef5dc0f1

  • SHA512

    7f75548df23cb0493e8917df8750b3a0eb6c0453585ad1f3bbb6a32c55ca22c363923d68dbc2ec26af5f41e538822f3e1855bd42cdbea4fed9d07af84264e9e6

  • SSDEEP

    12288:ejSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXM:e2nttOMZHAqws2nttOMZHNqwc

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 3672-1015-0x000000000042161D-mapping.dmp