General

  • Target

    1912-231-0x0000000000400000-0x0000000000463000-memory.dmp

  • Size

    396KB

  • MD5

    1089d925539d1774367b9e50d330d3b4

  • SHA1

    8c17974ae5db6708ea8cb5c7f59c53f205bfcec7

  • SHA256

    1e7b0d76ba33d90a0eda37868deaa3614b75dc58e60c1e6c18ea3729314c1025

  • SHA512

    1f7835899ddd7b7c7ea35d06bcc5ca2dc3d811ba018a5751c18a5f463d8615176c298eab2f21f51ae4ba8431730c0234a8a2d6d61ba2b5f480d38fc098fbeb09

  • SSDEEP

    6144:87RuJ65bQbNrJOc7WW1LYEGDX61jtcvsyE/35/3GvYyk6z:KuJ65b6NVTWWjD1jtM+35/3GgyJ

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55

Botnet

517

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80

Attributes
  • profile_id

    517

Signatures

Files

  • 1912-231-0x0000000000400000-0x0000000000463000-memory.dmp
    .exe windows x86


    Headers

    Sections