General

  • Target

    1204-932-0x0000000000429CBD-mapping.dmp

  • Size

    709KB

  • MD5

    a1d3d36718f1803c6eeeed67aa37acc8

  • SHA1

    54b62827b8aa9a96040a067c1463dc13a66e6b13

  • SHA256

    909fb9c07324f21ebd71c0b9e23e2c558ee46d15be0488fb569ef18e5dbae403

  • SHA512

    a4e1b00223ccdd77ff220ede2089a7594797a7cb625d4869d159b235bf9ec136513ed9a8d7fc364592740921140e453e3eba90ed7166f9b764ee90d48d0fb937

  • SSDEEP

    12288:zuJ65b6NVTWWjD1jtM+35/3fgyJ7uJ65b6NVTWWjD1jtM+35/3kgyJV:zLb6NxWWn1pM+B34yJ7Lb6NxWWn1pM+0

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55

Botnet

517

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80

Attributes
  • profile_id

    517

Signatures

Files

  • 1204-932-0x0000000000429CBD-mapping.dmp