General

  • Target

    1444-88-0x0000000000429CBD-mapping.dmp

  • Size

    705KB

  • MD5

    40e989a622785c9fb1fd3ec384e952bd

  • SHA1

    7eac1e6005172528e6b929eaa6fb18dad1c271b0

  • SHA256

    94f7e660111e518ba31156fc08fd8ec636254e2b24cbc80f8d35ab1b28e49c98

  • SHA512

    38e72da66e294f2769d6757ab0acf6cf887c6c6b69899f016b3ee5a19622f63cd9d5c3fe6a30bf2070f8d2c5ea1ad9a86727a362504f7c32fb698cbad177a896

  • SSDEEP

    12288:huJ65b6NVTWWjD1jtM+35/35gyJiuJ65b6NVTWWjD1jtM+35/32gyJQ:hLb6NxWWn1pM+B3GyJiLb6NxWWn1pM+n

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55

Botnet

517

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80

Attributes
  • profile_id

    517

Signatures

Files

  • 1444-88-0x0000000000429CBD-mapping.dmp