Overview

overview

10

Static

static

10

1764-57-0x...ry.exe

windows7-x64

1

1764-57-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1764-57-0x0000000000400000-0x0000000000469000-memory.dmp

  • Size

    420KB

  • MD5

    ddca6abab7c420372a500d77a58b46c3

  • SHA1

    eac4315ac110ec73c35fa5a97bb365b4b338dde5

  • SHA256

    e54dea8e47d1bdf5c7cc8b8cac9f250336f6d5bbf40f1f12337f6cbc0854c3f8

  • SHA512

    f5dab8dfc97f8ac3c5491896966fa426ffa72a2eabb812faaa44faeaf55865c44b73be978e9f0642e17b886af8c391e2f30d9d0e97c10c686b7f666c6d93ddfa

  • SSDEEP

    6144:V7RuOykrfGN/brhpEaYgy68YCjGi9jtwJgxpcxqeHnvYa90qBW/1OBM:7uOykrONDrEk3x89jttSxqeHngaj2

Score
10/10
1636vidar

Malware Config

Extracted

Family

vidar

Version

55

Botnet

1636

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80
Attributes
  • profile_id

    1636

Signatures

Files

  • 1764-57-0x0000000000400000-0x0000000000469000-memory.dmp
    .exe windows x86


    Headers

    Sections