General

  • Target

    3356-401-0x000000000042161D-mapping.dmp

  • Size

    667KB

  • MD5

    67ad8a491d9f9c6bb2e50d29bbd0f563

  • SHA1

    d91f8ae79034d001a2c1283ba52fd77aedaa8253

  • SHA256

    2268ec88d8f92e6d4eac68d4e84d110c906128bb70c535a722317b78638e0ee7

  • SHA512

    680b6a8950ac20c6c417172a35c54e13542ed83a0850e025a921cfee80fcc346cbf21c85c5732825e4ff1833f2b988225e4dc8ea3c371d47b3bbb0bec4834869

  • SSDEEP

    12288:TjSn3dW0OM0JKHAGNwX8jSn3dW0OM0JKHNGNwXp:T2nttOMZHAqws2nttOMZHNqwZ

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

517

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

Attributes
  • profile_id

    517

Signatures

Files

  • 3356-401-0x000000000042161D-mapping.dmp