General

  • Target

    1564-171-0x0000000000400000-0x00000000005B0000-memory.dmp

  • Size

    1.7MB

  • MD5

    7dc14725c88dc5138ec01c52fd173501

  • SHA1

    6ecd27782fa131679e9c51e40cccd3b1b476b0a0

  • SHA256

    4197b65e0cbcbee36d5bde04f869b539f99baddf4298552ba469c2bf72591a5c

  • SHA512

    93de39f066ccafbe2a6fc50a8e481bbd666f8f7666d876dd0ddd3fe30243906d0c081cab4574659fa3c3942d7827f2875540a93bb61b5e4466fd2cab2fd46469

  • SSDEEP

    3072:GT8IHnYWyQxaHybFrLjF6SCyFrAKo2ZnfQa5JKR+mMh7mxkDrrb0HqhU1amfo8vM:GTpfxjF6SCMemIQPmXm7ZhUEmjl672s

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.2

Botnet

1752

C2

https://t.me/slivetalks

https://c.im/@xinibin420

Attributes
  • profile_id

    1752

Signatures

Files

  • 1564-171-0x0000000000400000-0x00000000005B0000-memory.dmp
    .exe windows x86


    Headers

    Sections