General

  • Target

    1212-56-0x0000000000400000-0x000000000045F000-memory.dmp

  • Size

    380KB

  • MD5

    c313614699ecd5767c33859d6245f5d1

  • SHA1

    c0fe9155d4dafa10677ca4ccdb2f36cf7c852280

  • SHA256

    e197026b1866f579a3d93922c4cdebe0bb6b61b1c73edc2d03936aff4adfd5f8

  • SHA512

    8f9eee6f3bba7802f8488bd64284dd27f9b09bea2206ab5dde8035e181754420a5edb173ed78ad6bf1c1513260cc4b8e1324d06ec4162f416dc777357844fb1d

  • SSDEEP

    6144:LMgF3Fi94C1DETicUoSSwu5To9TFRF+ooDBRWRhbaUt1Zw:gYFwETicUoSSwu5To9T0ooDBRWRhbP

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.9

Botnet

1686

C2

https://t.me/headshotsonly

https://steamcommunity.com/profiles/76561199436777531

Attributes
  • profile_id

    1686

Signatures

Files

  • 1212-56-0x0000000000400000-0x000000000045F000-memory.dmp
    .exe windows x86


    Headers

    Sections