General

  • Target

    1912-56-0x0000000000400000-0x000000000045F000-memory.dmp

  • Size

    380KB

  • MD5

    0c216e90b13999e6c328faa97b440e45

  • SHA1

    6d58d07c43326564b216c0d6dcbe188a4ca7a87e

  • SHA256

    4580d9dee3c4dd3dccdaed8152110cd513931d336391a8b862c16950f9aecc38

  • SHA512

    c3bcc7ee8d3099a70c67c5854b867a588d3790b055f67f3a138565fd4c2e79cd990e17cd7afdf822b2c196cce7e45f214c77fc8b151c648252e082964eb46d1b

  • SSDEEP

    6144:81eP2/FKoLSCRxocUoSSwu5To9X0gnfXL9GqBbV8rhOHkz3lKqPUX5:80e/FrIcUoSSwu5To9XbXL9pBbV80kzr

Score
10/10

Malware Config

Extracted

Family

vidar

Version

56

Botnet

517

C2

https://t.me/asifrazatg

https://steamcommunity.com/profiles/76561199439929669

Attributes
  • profile_id

    517

Signatures

Files

  • 1912-56-0x0000000000400000-0x000000000045F000-memory.dmp
    .exe windows x86


    Headers

    Sections