General

  • Target

    1348-56-0x000000000042353C-mapping.dmp

  • Size

    672KB

  • MD5

    a1f19226efda65e396329f8a2de76653

  • SHA1

    f8392b8fc6eef731e4d41709a9cda206841b3a45

  • SHA256

    fa2d9cada28fdbef860f85db2aef4d9f8f0fcecfac734c156211828a079a46d9

  • SHA512

    1075ebd835f92c38a2ad6df7c0eb5237a32316580f2eb02f66a520a1546a233ed44a333a63b54252d596d37dd8857982fb5b5d29fb430d39ee6249f56f2692c7

  • SSDEEP

    12288:IZFf5gcUoSSwu5To9TZQoiQBB1RhbYZFf5gcUoSSwu5To9TZQoiQBBQRhbC:IveZQoiAtYveZQoiAyC

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.9

Botnet

517

C2

https://t.me/headshotsonly

https://steamcommunity.com/profiles/76561199436777531

Attributes
  • profile_id

    517

Signatures

Files

  • 1348-56-0x000000000042353C-mapping.dmp