General

  • Target

    4768-1057-0x0000000000429CBD-mapping.dmp

  • Size

    709KB

  • MD5

    c642745ce19d447af1f1c8939e84e7e9

  • SHA1

    4cd451c0d5d94e5d211a9e240a941bc10fbf574a

  • SHA256

    4ebbc8027c8f414d7d6de6759368bb709ad5fa7aaa3f6c0b257b680701c62c54

  • SHA512

    d683ad2f1be5fc16f1469e43a2f31ddedf7cd054f12c4556f0b9e7a9a366c930531392387b160139e1674c4870af55860c725de3360e1616c06a187c65fb10dc

  • SSDEEP

    12288:vuJ65b6NVTWWjD1jtM+35/3fgyJ7uJ65b6NVTWWjD1jtM+35/3kgyJS:vLb6NxWWn1pM+B34yJ7Lb6NxWWn1pM+X

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55

Botnet

517

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80

Attributes
  • profile_id

    517

Signatures

Files

  • 4768-1057-0x0000000000429CBD-mapping.dmp