General

  • Target

    3824-146-0x0000000000400000-0x0000000002C44000-memory.dmp

  • Size

    40.3MB

  • MD5

    633ba2217f49d65a91b1d228471cd791

  • SHA1

    551cbeb61c0bdb553554058612a29e44676962fd

  • SHA256

    914f767c14e3163583643e45261881946e6121b78f45b6d37a5a0f1ca19f5762

  • SHA512

    8284f677071b55f902fda14cfe3431c5e732168163dec96bf28013d09be2b106a2cb955eda3dec7a30f101dc80d6b8a847847eac80a9f0acb388a786d1b24960

  • SSDEEP

    3072:PT8IHnYWyQxavyUQp7/jNBLkmo2Z4fQW5JKR+mMh7mlkkrrb0HqpU1amfoBd+59w:PTpP5/remHEPmXCOZpUEmCo6zk1c

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.2

Botnet

937

C2

https://t.me/slivetalks

https://c.im/@xinibin420

Attributes
  • profile_id

    937

Signatures

Files

  • 3824-146-0x0000000000400000-0x0000000002C44000-memory.dmp
    .exe windows x86


    Headers

    Sections