General

  • Target

    3444-267-0x0000000000400000-0x00000000005B0000-memory.dmp

  • Size

    1.7MB

  • MD5

    d7129ecf720266ad6def4bbfea439a7e

  • SHA1

    5e5015296e67ee867658b7ae16c09c49dfc350cd

  • SHA256

    54fad220dda8b9003e73d04df95e67292428265b6a7bfd767f579ae03f89c29b

  • SHA512

    aaec895d290265d5d9467517ef7ff3c2dec413e658e088c8728f6c4d50c91eb668e68a8aacc64ab388d12d239bb6e7b2ea5f2eb7c93bf176301aacba9f1372b9

  • SSDEEP

    3072:GT8IHnYWyQxaHybFrLjF6SCyFrAKo2ZnfQa5JKR+mMh7mGkDrrb0HqhU1amfoBkf:GTpfxjF6SCMemIQPmXX7ZhUEmCD6r2s

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.2

Botnet

1752

C2

https://t.me/slivetalks

https://c.im/@xinibin420

Attributes
  • profile_id

    1752

Signatures

Files

  • 3444-267-0x0000000000400000-0x00000000005B0000-memory.dmp
    .exe windows x86


    Headers

    Sections