General

  • Target

    1380-57-0x0000000000400000-0x0000000000668000-memory.dmp

  • Size

    2.4MB

  • MD5

    cc9b6bcfacdef35a1da939e070a44d5e

  • SHA1

    5a7f5a39bbf09874a5e74440eabae0fd1c04895e

  • SHA256

    f8802e2dac9f40280ea835d7dff5d378962ef9d0dc32fe0fb109025669c5639f

  • SHA512

    1c423da26216168c0ebb1c20ab22414e5acfd4fbb2506aaf42b5b27fc9f4f3f33580d3eda3f9140c26f231066d9556c8deabb95226348f8820e40d7161556e08

  • SSDEEP

    6144:KIgiKBNFb9xvIdnvcUoSSwu5To9j57Wlrf95PkzRhbpUQ8ouhu:KXFwdvcUoSSwu5To9j4lz950Rhb4S

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.8

Botnet

937

C2

https://t.me/headshotsonly

https://steamcommunity.com/profiles/76561199436777531

Attributes
  • profile_id

    937

Signatures

Files

  • 1380-57-0x0000000000400000-0x0000000000668000-memory.dmp
    .exe windows x86


    Headers

    Sections