Overview

overview

10

Static

static

10

1296-56-0x...ry.exe

windows7-x64

1

1296-56-0x...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1296-56-0x0000000000400000-0x0000000000480000-memory.dmp

  • Size

    512KB

  • MD5

    3b62fd9372e922abda79bc001a828a45

  • SHA1

    5da037fd3373776019acc2be5344498cb7074812

  • SHA256

    a467d0070a8dd39816323a92d687ee00021e25e79c40c9829390e09263d329d0

  • SHA512

    35e82529ad58c32e9847190fe04b121c381421083dfc34317ee827940fe9e2e9a373ba42d8382578014b772fcc9d65eae6dff95ad1aaf49240b4840c481649db

  • SSDEEP

    6144:hJqXUwx14gYnZOJILI1H4jv0edFKTbSMWWUqOWmIUTSoPTHbCa:hJqX9x1ynZZIJzQcTbShWUqO9uwTR

Score
10/10
14vidar

Malware Config

Extracted

Family

vidar

Version

1.5

Botnet

14

C2

https://t.me/dahuasecurit

https://steamcommunity.com/profiles/76561199441999914
Attributes
  • profile_id

    14

Signatures

Files

  • 1296-56-0x0000000000400000-0x0000000000480000-memory.dmp
    .exe windows x86


    Headers

    Sections