General
- Target 102248-218-0x0000000000400000-0x000000000045E000-memory.dmp
- Size 376KB
- Sample221025-deqplsbch8
- SHA256 aa26db6806a4a19f5aa0a10ee25db1faa2b2c76b88e730a5ecf5d9cf680f9e0b
- MD5 c49da1984ceb6396992a8853189df57f
- SHA1 f24e3998e69b72d5cf8888324031bb78de265233
- SHA512 6bae085886e60ad2e4cc1185ddfa6b283bac138c12ada125b7ba4627d327ec6daf5916fb3b6cae742a3b8d991aa977ae30f814a438e09bcccf6157766a6d5865
- SSDEEP 3072:zT8IHnYWyQxavyUQp7/jNBLkmo2Z4fQW5JKR+mMh7mikkrrb0HqXU1amfo+L590:zTpP5/remHEPmXrOZXUEmdl6
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
102248-218-0x0000000000400000-0x000000000045E000-memory.exe
Resource
win7-20220812-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
102248-218-0x0000000000400000-0x000000000045E000-memory.exe
Resource
win10v2004-20220812-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
55.2
Botnet
-
517
C2
-
https://t.me/slivetalks
-
https://c.im/@xinibin420
Attributes
-
profile_id
517
Targets
-
- Target 102248-218-0x0000000000400000-0x000000000045E000-memory.dmp
- Size 376KB
- SHA256 aa26db6806a4a19f5aa0a10ee25db1faa2b2c76b88e730a5ecf5d9cf680f9e0b
- MD5 c49da1984ceb6396992a8853189df57f
- SHA1 f24e3998e69b72d5cf8888324031bb78de265233
- SHA512 6bae085886e60ad2e4cc1185ddfa6b283bac138c12ada125b7ba4627d327ec6daf5916fb3b6cae742a3b8d991aa977ae30f814a438e09bcccf6157766a6d5865
- SSDEEP 3072:zT8IHnYWyQxavyUQp7/jNBLkmo2Z4fQW5JKR+mMh7mikkrrb0HqXU1amfo+L590:zTpP5/remHEPmXrOZXUEmdl6
- MD5 SHA1 SHA512 SSDEEP
Score1/10