General

  • Target

    1748-56-0x0000000000400000-0x0000000002C57000-memory.dmp

  • Size

    40.3MB

  • MD5

    2db786546cacf1e34c2eaabb25561cce

  • SHA1

    d5572784a2a1d8825ca59f1df7f17a226f5cab3c

  • SHA256

    f7f4b1f615094e7b2b0ef267d7dc67e1cea241e4170c7c7239c4b89b85fec940

  • SHA512

    6057fec8b512d2c9ef0c270afd5eb5355d86af4e0bce86a40d7a39d6deabf708e662fe0d24208be5ef7b32f98c47e1fd2d77d2509fd151ff497ac27d3ad7d356

  • SSDEEP

    6144:17pON8pLwfct+KUGCvGJlcWwoKLL4YnUDTtqjdWKQs6no:1RpgKNgWw5LcYLbbSo

Score
10/10

Malware Config

Extracted

Family

vidar

Version

1.8

Botnet

24

C2

https://t.me/year2023start

https://steamcommunity.com/profiles/76561199467421923

Attributes
  • profile_id

    24

Signatures

Files

  • 1748-56-0x0000000000400000-0x0000000002C57000-memory.dmp
    .exe windows x86


    Headers

    Sections