General

  • Target

    3580-161-0x0000000000400000-0x00000000005B0000-memory.dmp

  • Size

    1.7MB

  • MD5

    a597c01a88bc9d888ebeb613afa0b3e0

  • SHA1

    9d8ac6235ec50a9b2c6214c4bffc3d53c4249747

  • SHA256

    7154ef5d1cbdace8e91115a78897a3597e1d517bce72d392dec45bb6c5bf24df

  • SHA512

    766138e472492fa104f7304235e10144c6d7e0fbe4d51101a509b995e4c094a6cbeaa988285d09f43573dae8bada31184edb595f5f784ccf90bf722b142dac66

  • SSDEEP

    3072:GT8IHnYWyQxaHybFrLjF6SCyFrAKo2ZnfQa5JKR+mMh7mAkDrrb0HqhU1amfo81t:GTpfxjF6SCMemIQPmXp7ZhUEmjb6K2s

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.2

Botnet

1752

C2

https://t.me/slivetalks

https://c.im/@xinibin420

Attributes
  • profile_id

    1752

Signatures

Files

  • 3580-161-0x0000000000400000-0x00000000005B0000-memory.dmp
    .exe windows x86


    Headers

    Sections