General

  • Target

    4692-148-0x0000000000400000-0x00000000005B0000-memory.dmp

  • Size

    1.7MB

  • MD5

    0a5c43367fc4ea1bf08c639556f9ba20

  • SHA1

    005b38922417ece9a3f9cb76c8faa3a76931e40b

  • SHA256

    a6627be1cee34fc7a7f6dd5a6b4053c1af6cf5fef4b5aab0725e672c4b627ef3

  • SHA512

    add8440ed5453db730ccb193f7a81aed9481bf0c04d657d229dc0c383e4ca54274a1f7d27399ecdc086fdccf263b65a9ecb2583ec53d01376adeaac941286df1

  • SSDEEP

    6144:GTpfxjF6SCMemIQPmXy7ZhUEmj/g6B2s:E5J6SC5CPmX4Zsbg6os

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.2

Botnet

1752

C2

https://t.me/slivetalks

https://c.im/@xinibin420

Attributes
  • profile_id

    1752

Signatures

Files

  • 4692-148-0x0000000000400000-0x00000000005B0000-memory.dmp
    .exe windows x86


    Headers

    Sections