General

  • Target

    3524-184-0x0000000000400000-0x0000000002C44000-memory.dmp

  • Size

    40.3MB

  • MD5

    cbe8a920ecde425a4aa8e56bd4f043a6

  • SHA1

    c679be0638e50908969b8b62728828d54227b54c

  • SHA256

    345d4e588b6a1c3295c22228c92d2527bafcb5474e033aae9355fadb7e4f4f46

  • SHA512

    a7d06528516ece628d14905a4c2c15e7c8b1336a2a2834c7e5e5590ef316ca8e2f2de4e20ced28dc2ee505f41c163fa96c7a2c65588ba7621f3a7b134d55322d

  • SSDEEP

    3072:GT8IHnYWyQxaHybFrLjF6SCyFrAKo2ZnfQa5JKR+mMh7m6kDrrb0HqhU1amfo8LC:GTpfxjF6SCMemIQPmXT7ZhUEmjw6K/T

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.2

Botnet

1752

C2

https://t.me/slivetalks

https://c.im/@xinibin420

Attributes
  • profile_id

    1752

Signatures

Files

  • 3524-184-0x0000000000400000-0x0000000002C44000-memory.dmp
    .exe windows x86


    Headers

    Sections