General

  • Target

    1048-55-0x0000000000400000-0x0000000000E53000-memory.dmp

  • Size

    10.3MB

  • MD5

    16439826ac6437d55dd15bbda29239f7

  • SHA1

    b8ed105c9ef172bac6507f7f1f8bff5b1ef86878

  • SHA256

    ccc6f8825a38c427377926397fcd61226993b7a59e1c786b435730d64aa209b2

  • SHA512

    6147ae454c9f4db45928d0385a52d1058f7f093a70f7a25e365f6e2cd1f920c0b678542ca395eaffe751ac45497de6cc714a57bdb3f74b2db36ade4f8007f98e

  • SSDEEP

    196608:itB3QOBl9EZNU0xgqbjPTHYyWmRaX+s7tM6Um2:itB3PeNR7bjPT4ye7fp2

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55

Botnet

1707

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80

Attributes
  • profile_id

    1707

Signatures

Files

  • 1048-55-0x0000000000400000-0x0000000000E53000-memory.dmp
    .exe windows x86


    Headers

    Sections