Overview

overview

10

Static

static

10

5072-274-0...ry.exe

windows7-x64

1

5072-274-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5072-274-0x0000000001250000-0x00000000016D9000-memory.dmp

  • Size

    4.5MB

  • MD5

    ba5cfe42227baa34d3c91993a5af89b9

  • SHA1

    4222839d5a38af2af0c8e5543e6fb5039f8725ba

  • SHA256

    fd7e1c44b71707ef74403d6071c1999f2761889370f187aacfe639f7cbd0c92c

  • SHA512

    9b8b2c1779faa34efdf1d31768bb6acd039e5b8aa99b6b16eb20322a039d041ef4c6cdb3f3a4010e053c4ab2daa632de213971e36ce5f994252461b5a1448f00

  • SSDEEP

    49152:EAIYx6U5y5qgcmE4LkLEsCV+83uj+hH5Uz1OvjFpK:EAwWUtLIEFV+v+x5URuv

Score
10/10
237vidar

Malware Config

Extracted

Family

vidar

Version

2.2

Botnet

237

C2

https://t.me/litlebey

https://steamcommunity.com/profiles/76561199472399815
Attributes
  • profile_id

    237

Signatures

Files

  • 5072-274-0x0000000001250000-0x00000000016D9000-memory.dmp
    .exe windows x86


    Headers

    Sections