General

  • Target

    4120-679-0x0000000000429CBD-mapping.dmp

  • Size

    709KB

  • MD5

    41bb4b9a3d0df45cd9321d8bdfbb8454

  • SHA1

    fcb71f6c0657a922b1b1b79af9d0e37fea6a9193

  • SHA256

    5680b21a747fca8eb655defab78cbd210352cf6c3dbf68dcec2876caeb21088c

  • SHA512

    66ffe7581820d79d588db7168c92c67c64fc591301a61e15455e674bc9cbe232da03a11aa0f794c5131c50e3dc067cdefb56c48737eae4ca1d9be92f62fd088e

  • SSDEEP

    12288:vuJ65b6NVTWWjD1jtM+35/3fgyJ7uJ65b6NVTWWjD1jtM+35/3kgyJ6:vLb6NxWWn1pM+B34yJ7Lb6NxWWn1pM+P

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55

Botnet

517

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80

Attributes
  • profile_id

    517

Signatures

Files

  • 4120-679-0x0000000000429CBD-mapping.dmp