General

  • Target

    1880-57-0x0000000000400000-0x0000000002C47000-memory.dmp

  • Size

    40.3MB

  • MD5

    87311f4947dd85f0801d8b14133916bb

  • SHA1

    58f3bc9e1e90122e40451216b83f173798e66da7

  • SHA256

    d64bc971643f04ada2cc9b4618a2a0204d4e9110c7e66836ef83b0b6e15ef5fe

  • SHA512

    55f1447b94e59d75b08f1148725a251e06f4f14479e101062a9e3aa022681eefb8508c15a165f596183df180c279b127ba3a4fc9f3ecda995dbf87f1de69a350

  • SSDEEP

    6144:M/aXymVORh1G3L6NzjZ8NtBbUziUDyqiBJ3r0r:0aX/V6h4wzl8NAzy0r

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.3

Botnet

1636

C2

https://t.me/dghzq

https://t.me/zjsqpz

https://t.me/fqwexzq

Attributes
  • profile_id

    1636

Signatures

Files

  • 1880-57-0x0000000000400000-0x0000000002C47000-memory.dmp
    .exe windows x86


    Headers

    Sections