General

  • Target

    1960-57-0x0000000000400000-0x00000000005B3000-memory.dmp

  • Size

    1.7MB

  • MD5

    22ff7bdcc840184157a27a53b5cfd034

  • SHA1

    f254f9dcd9184c47e92ca557ca756670e1221612

  • SHA256

    30c4b60ae02c033e5bdd0f8bd0b042717d2d78f40a3bc1c54e0394126be7e6bc

  • SHA512

    0b3e4e9d37ae4382c0029e1c1ffc563e174e428fbed1457138c2859745f3d6c629fadc423281814441a2496295bd80d2d7d236bc5e0f1af3e3a35c4b7be1456a

  • SSDEEP

    6144:N7RuOykrfGN/krlZEaYgy68YC7Wi9jtwJgxpcxqeHZvYad0q92/1OBMK4j:juOykrONM3Ek3xU9jttSxqeHZgaf2Tj

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55

Botnet

1703

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80

Attributes
  • profile_id

    1703

Signatures

Files

  • 1960-57-0x0000000000400000-0x00000000005B3000-memory.dmp
    .exe windows x86


    Headers

    Sections