General

  • Target

    2432-1405-0x0000000000429CBD-mapping.dmp

  • Size

    709KB

  • MD5

    e9b3cb43ded2257128b6feeab78f12db

  • SHA1

    b8633fd77020e3ecc35fb1c195eea3ef6bc7fa0e

  • SHA256

    3be1c55327fa816c5a43ca3ad59e1179a64344fdd597139d86acf6cace16256d

  • SHA512

    89b788e4d72c6c404235233a1ab1f3e4ce0aec8525c2fc5ae5ee51cf7929aed4561ddcfa30a6daf8b15f007ffae52fa3f56dd1c487a02c032959a8ffda95d7cc

  • SSDEEP

    12288:IuJ65b6NVTWWjD1jtM+35/3fgyJ7uJ65b6NVTWWjD1jtM+35/3kgyJa:ILb6NxWWn1pM+B34yJ7Lb6NxWWn1pM+v

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55

Botnet

517

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80

Attributes
  • profile_id

    517

Signatures

Files

  • 2432-1405-0x0000000000429CBD-mapping.dmp