Overview

overview

10

Static

static

10

1248-55-0x...ry.exe

windows7-x64

1248-55-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1248-55-0x0000000000400000-0x0000000000D66000-memory.dmp

  • Size

    9.4MB

  • MD5

    578959ff634a4df1a2b92011ffcda7cd

  • SHA1

    128f11ab3c22e34bc9065beefb43528fa86f6782

  • SHA256

    34fc3f84ad337b0484b4baf1f2d09154ca1c48e59dfaf980f13070149919bc64

  • SHA512

    f7f5459b5ae3b016a62df219769ea2b329ce5db786dce061fecc0317a596b86361092ee7c6207504a649ffcc1557c51616d5a12f69cf43006e29b868539b818a

  • SSDEEP

    196608:X6Q8anwnOpP2E0gm14KtFERytM3JDsQ7sfXczMNru3JNf:XT8hOUQKtFERrJ/7cmJ

Score
10/10
1729vidar

Malware Config

Extracted

Family

vidar

Version

55

Botnet

1729

C2

http://88.119.169.42:80

Attributes
  • profile_id

    1729

Signatures

Files

  • 1248-55-0x0000000000400000-0x0000000000D66000-memory.dmp
    .exe windows x86


    Headers

    Sections