General

  • Target

    1836-222-0x0000000000400000-0x0000000000463000-memory.dmp

  • Size

    396KB

  • MD5

    f22dab49133589e7e6fe32bcc9607ae2

  • SHA1

    95d3a1e4a72e7b5de5853c36d8f7f58aac5ed835

  • SHA256

    096d6957362e15f24b76437c295366f7d0faf36483f173f01d2db55addbd617f

  • SHA512

    6cd49763803f42093726734b6fab6eb81c272a145490fceeebe8f917fe2b56b00860274bc22638dd799615cb71c4e04de67d23d3d25d57907bfb4cb6824ff518

  • SSDEEP

    6144:87RuJ65bQbNrJOc7WW1LYEGDX61jtcvsyE/35/3fvYyk6Y:KuJ65b6NVTWWjD1jtM+35/3fgyJ

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55

Botnet

517

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80

Attributes
  • profile_id

    517

Signatures

Files

  • 1836-222-0x0000000000400000-0x0000000000463000-memory.dmp
    .exe windows x86


    Headers

    Sections