General

  • Target

    1636-149-0x0000000000400000-0x00000000005B1000-memory.dmp

  • Size

    1.7MB

  • MD5

    684291eedd3af9af969eea5916343aa0

  • SHA1

    ac7fba6cf90b9e5997f247ef8ed487e0349fc5bf

  • SHA256

    c779307b6122d3ff1be71aeb5c905dfc9124ed8be2db9d3397a2f5eebefd33b3

  • SHA512

    d63a671592072373347a4b324571c036b0e4a4635433536bdc1ffeb5b98bbb62174a24d0de275c0ea58cf4356542720649dc41bba6e9a0dd22f7b6e2b679c468

  • SSDEEP

    3072:PT8IHnYWyQxavyUQp7/jNBLkmo2Z4fQW5JKR+mMh7mXkkrrb0HqpU1amfo8g9K52:PTpP5/remHEPmXUOZpUEmjgW6

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.2

Botnet

937

C2

https://t.me/slivetalks

https://c.im/@xinibin420

Attributes
  • profile_id

    937

Signatures

Files

  • 1636-149-0x0000000000400000-0x00000000005B1000-memory.dmp
    .exe windows x86


    Headers

    Sections