Overview

overview

10

Static

static

10

1308-149-0...ry.exe

windows7-x64

1

1308-149-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1308-149-0x0000000000400000-0x00000000005B1000-memory.dmp

  • Size

    1.7MB

  • MD5

    2bc3ea9f88af8f0974513fb741bce6f5

  • SHA1

    a0c11cf3713dd8d65ce7d0c5311c1aac009c8f98

  • SHA256

    df4255228e20b0628b69bf7081d4142ac784e608be6df7631cb15f3242163aa5

  • SHA512

    bd20aad56ae5a2a8eb202f07832dfdad8e56a413c76162606fef3b98f0f1a47fb13a4ce1756482a7e674ce91eac5355facfa6de73a281b27c6897422dbc30a66

  • SSDEEP

    3072:PT8IHnYWyQxavyUQp7/jNBLkmo2Z4fQW5JKR+mMh7mMkkrrb0HqpU1amfo8TUggf:PTpP5/remHEPmXtOZpUEmja6

Score
10/10
937vidar

Malware Config

Extracted

Family

vidar

Version

55.2

Botnet

937

C2

https://t.me/slivetalks

https://c.im/@xinibin420
Attributes
  • profile_id

    937

Signatures

Files

  • 1308-149-0x0000000000400000-0x00000000005B1000-memory.dmp
    .exe windows x86


    Headers

    Sections