Overview

overview

10

Static

static

10

3192-149-0...ry.exe

windows7-x64

1

3192-149-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3192-149-0x0000000000E70000-0x00000000012F9000-memory.dmp

  • Size

    4.5MB

  • MD5

    9fc90bbf9361d57549ce6fed551047b8

  • SHA1

    9570c40bfa13f0c371b47eba915417022217f65b

  • SHA256

    a9230633644c6caff8e1ed5248f7379dc739f081265cf6de20d6d55712302ec9

  • SHA512

    d8af1ca5c5ceec34c9adb317eeb852f911b71cf0637ce8060fa03a13d16c8b1062f5abf2b5813c988b542a48712c4c0fb4e50b36b695fa37d0a5bfee5155f54c

  • SSDEEP

    49152:E1kl/89Wy5qw027MLkoEsCV+83uj+hH5Uz1OvBFpK:E19AciLDEFV+v+x5URAv

Score
10/10
237vidar

Malware Config

Extracted

Family

vidar

Version

2.2

Botnet

237

C2

https://t.me/litlebey

https://steamcommunity.com/profiles/76561199472399815
Attributes
  • profile_id

    237

Signatures

Files

  • 3192-149-0x0000000000E70000-0x00000000012F9000-memory.dmp
    .exe windows x86


    Headers

    Sections