General

  • Target

    4300-148-0x0000000000400000-0x00000000005B1000-memory.dmp

  • Size

    1.7MB

  • MD5

    af1c5790c63a4aa9413631736adff7b4

  • SHA1

    a5c3450ad6b69f1ead6a4954a10b7ce14311ee77

  • SHA256

    ca9e4bca4599a49d27137e4b75d03aa61360335139506d5a403d2f35193b4f25

  • SHA512

    1985fc98f7f4e74d9339718b5a35e59f1f4b25e6dc12bb4533a089186921c97503fd8dc8661cce01cc5b98d4fa94311117343e5ff9b4c5681c905d674d67f292

  • SSDEEP

    3072:PT8IHnYWyQxavyUQp7/jNBLkmo2Z4fQW5JKR+mMh7mFkkrrb0HqpU1amfo8L6592:PTpP5/remHEPmXiOZpUEmji6

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.2

Botnet

937

C2

https://t.me/slivetalks

https://c.im/@xinibin420

Attributes
  • profile_id

    937

Signatures

Files

  • 4300-148-0x0000000000400000-0x00000000005B1000-memory.dmp
    .exe windows x86


    Headers

    Sections