General

  • Target

    960-80-0x0000000000400000-0x0000000002C57000-memory.dmp

  • Size

    40.3MB

  • MD5

    bba124f1ff32619e3efa9483b153efdb

  • SHA1

    eb6ef1a79676cfba252f373662f1b5b02b3f33e3

  • SHA256

    d6c87da2cd5e2c2c8ec17b09a00b756fcc24aae8004e2c301030476edc670ea3

  • SHA512

    c2a34ea080e551e0d83a8da89234114f5991b52e576c989451bc58eb6f97101a28d66a55d9c2b80b65096e9b21d61c17ee5d94d0c0cb3fbc6217ea83060ffe69

  • SSDEEP

    6144:i7pON8pLwfct+KUGCvGJlcWwoKjL4YWUDvtqedWKQbJro:iRpgKNgWw5jcYdbQro

Score
10/10

Malware Config

Extracted

Family

vidar

Version

1.8

Botnet

494

C2

https://t.me/year2023start

https://steamcommunity.com/profiles/76561199467421923

Attributes
  • profile_id

    494

Signatures

Files

  • 960-80-0x0000000000400000-0x0000000002C57000-memory.dmp
    .exe windows x86


    Headers

    Sections