General

  • Target

    1644-54-0x0000000000D10000-0x0000000001804000-memory.dmp

  • Size

    11.0MB

  • MD5

    14ad29185263783e69efcb23ac9a5841

  • SHA1

    8d86a692fe13f243e0f61cebbf5ec389b98d6887

  • SHA256

    df217aa2355fb659a7836b714f8c9b3ed23de8809671148b1175099fb4b34cd0

  • SHA512

    301ff14026951386f1d652c088ce5b4637afdd13d4aff82d48f9ce4637da6655c425f08ad77faf1302adcf4b44ddee6f0a9fb042c4f117913edd3fcf724f09af

  • SSDEEP

    196608:f6AKWMMtY4Y+b0+wbfbYmh+qXCS+n5QKzk81xIUijgBuKPLLuRcY3j+cjP0:fpKWMMtY4idomdXCxn5r5z4jWPLLuRc5

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.3

Botnet

1748

C2

https://t.me/slivetalks

https://c.im/@xinibin420

Attributes
  • profile_id

    1748

Signatures

Files

  • 1644-54-0x0000000000D10000-0x0000000001804000-memory.dmp
    .exe windows x86


    Headers

    Sections