General

  • Target

    1180-152-0x0000000000400000-0x0000000002BB9000-memory.dmp

  • Size

    39.7MB

  • MD5

    e6e5d82834492c0eefc7dd8b926bae53

  • SHA1

    18f284f89d21a935803975dda298021b84fd094f

  • SHA256

    ef558e6137dd77d7943cc4e597493811f4210aeedcc6332b96b16fca3948385d

  • SHA512

    beff75b06aece36615a13968edcde7b19864e8976f4573138a66aaa58763828cdc992376bd19d4693f64b95b283752950187308757ba93d26a00c1cb10b848e7

  • SSDEEP

    6144:s3TdaE6ZLHgYRaDfp/o3MZg8qy6ImWfB+3zvGo/UiMu:s3ToE65HgzDJMMq3ofB+3TX8u

Score
10/10

Malware Config

Extracted

Family

vidar

Version

2.1

Botnet

237

C2

https://t.me/jetbim2

https://steamcommunity.com/profiles/76561199471266194

Attributes
  • profile_id

    237

Signatures

Files

  • 1180-152-0x0000000000400000-0x0000000002BB9000-memory.dmp
    .exe windows x86


    Headers

    Sections