General

  • Target

    63768-183-0x0000000000400000-0x00000000005B0000-memory.dmp

  • Size

    1.7MB

  • MD5

    873c924ce9b72f5f9994c06fb1c7b05d

  • SHA1

    1beed56c325a4d26d7fcd0ed339b80e3a31c73dc

  • SHA256

    bfbba3107012068db7c9594fc90ae943a2c1fc86a0ba5dc51609f9ec7c957123

  • SHA512

    4e42a8f9d9d36848bba341500521c8226f4cb1f886b6e43449a0f3639b875f3dd8f689445a6a28833d3e9a908d1e964acccc182ce77f7d2995e2d482dc090f47

  • SSDEEP

    3072:GT8IHnYWyQxaHybFrLjF6SCyFrAKo2ZnfQa5JKR+mMh7mEkDrrb0HqhU1amfo8fp:GTpfxjF6SCMemIQPmX17ZhUEmjm632s

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.2

Botnet

1752

C2

https://t.me/slivetalks

https://c.im/@xinibin420

Attributes
  • profile_id

    1752

Signatures

Files

  • 63768-183-0x0000000000400000-0x00000000005B0000-memory.dmp
    .exe windows x86


    Headers

    Sections