General

  • Target

    208-1056-0x0000000000429CBD-mapping.dmp

  • Size

    709KB

  • MD5

    0997a1765142eeaaa168b4b0b7ef42ca

  • SHA1

    28605035efaf0bd4cc90cd8b76439374332bdf50

  • SHA256

    f1c16edbf79be3ef802d9ce837d4bf63b5c3ac05dbdf86833480822ec3c33673

  • SHA512

    5fc747af6695c5602d904cd3d6ed94d23ab44d0b0fde3dcf5ceb85aea2a4677f97d2c45edf0054cd873145fe628109f0ec7c3725ce36ae7c6e3cbe3283aebd1b

  • SSDEEP

    12288:duJ65b6NVTWWjD1jtM+35/3fgyJ7uJ65b6NVTWWjD1jtM+35/3kgyJZ:dLb6NxWWn1pM+B34yJ7Lb6NxWWn1pM+Y

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55

Botnet

517

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80

Attributes
  • profile_id

    517

Signatures

Files

  • 208-1056-0x0000000000429CBD-mapping.dmp