General

  • Target

    3580-886-0x0000000000429CBD-mapping.dmp

  • Size

    709KB

  • MD5

    4bf635a852f64c7782e8f9719f97f65d

  • SHA1

    c5074c17e0e198d8916606398972a5c727473b0c

  • SHA256

    dd7ed43fd1905c1fb74baaf1d592f599ba6f12f9e4b44b0fa9245f26a90b6e0e

  • SHA512

    3504b1879e16b18f7e8348b8077cdfdd9ee4483376cbe23d2bc74801d8d2b09af5c4834b44506e9aab49954c4716c1eba7bbf4f2e740c9df816febfdf469d596

  • SSDEEP

    12288:RuJ65b6NVTWWjD1jtM+35/3fgyJ7uJ65b6NVTWWjD1jtM+35/3kgyJT:RLb6NxWWn1pM+B34yJ7Lb6NxWWn1pM+e

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55

Botnet

517

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80

Attributes
  • profile_id

    517

Signatures

Files

  • 3580-886-0x0000000000429CBD-mapping.dmp