General

  • Target

    4140-1292-0x0000000000429CBD-mapping.dmp

  • Size

    709KB

  • MD5

    548268956f263c5e6a4d9813d106c2e2

  • SHA1

    dd661e34a7c4b0e81c584f94c7149f261f742c74

  • SHA256

    6a6c357daf6e9bd93d40172a754fb9241d28d451d85da6ff627d02b6c8ea00a2

  • SHA512

    3bebd64a8208bc78cf0c0008f93376e0bfb9ce960b83881c51277885e8d2b597e934ee950ddcfb60b4f2272e4f6767cfd37de0497b2d622fb10d8a3a3d1af47e

  • SSDEEP

    12288:4uJ65b6NVTWWjD1jtM+35/3fgyJ7uJ65b6NVTWWjD1jtM+35/3kgyJK:4Lb6NxWWn1pM+B34yJ7Lb6NxWWn1pM+/

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55

Botnet

517

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80

Attributes
  • profile_id

    517

Signatures

Files

  • 4140-1292-0x0000000000429CBD-mapping.dmp