General

  • Target

    2000-57-0x0000000000400000-0x0000000000470000-memory.dmp

  • Size

    448KB

  • MD5

    e5003877468e249fa0261b59cc874582

  • SHA1

    fb969e3ec4a1c7cfab8b07ecccf5951c054ba888

  • SHA256

    f52fe70287479d22443cd8a1b467083e54fc8a98b8e94e1bf370f2f845d3de1f

  • SHA512

    3f405e68712129d8c39a11018fbf3ba03f326553ffd635d9ec8d5de76f1d322ce5537cce9b59ab7c21c736f95caebab9586a48838734541909e7b49975d00cd8

  • SSDEEP

    6144:N7RuOykrfGN/krlZEaYgy68YC7Wi9jtwJgxpcxqeHtvYad0qFH/1OBMAfquSfn:juOykrONM3Ek3xU9jttSxqeHtgaG2fz

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55

Botnet

1703

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80

Attributes
  • profile_id

    1703

Signatures

Files

  • 2000-57-0x0000000000400000-0x0000000000470000-memory.dmp
    .exe windows x86


    Headers

    Sections