General

  • Target

    640-170-0x0000000000400000-0x0000000000463000-memory.dmp

  • Size

    396KB

  • MD5

    eb5929bf7de185cb859df89a20bea0cd

  • SHA1

    a01cf91a14ee470313065c63d926b2e2c692554b

  • SHA256

    7f24532e3b1f4be85eb2c7ebf67421e62fb2f45a449f2bd08450a2f4df8d4d45

  • SHA512

    8716dfa6a380f8c79beae793a558505c793a1dde7ceed87e7bf965e8e86f7eaab099695b83fd705cb8175f1fbee5e115e31ecfba5b58f7191c0ffb115bb966ea

  • SSDEEP

    6144:87RuJ65bQbNrJOc7WW1LYEGDX61jtcvsyE/35/3lvYyk6Y:KuJ65b6NVTWWjD1jtM+35/3lgyJ

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55

Botnet

517

C2

https://t.me/truewallets

https://mas.to/@zara99

http://116.203.10.3:80

Attributes
  • profile_id

    517

Signatures

Files

  • 640-170-0x0000000000400000-0x0000000000463000-memory.dmp
    .exe windows x86


    Headers

    Sections