General

  • Target

    1816-56-0x0000000000400000-0x0000000000470000-memory.dmp

  • Size

    448KB

  • MD5

    7c586d8c14903ecfce148acce6834e22

  • SHA1

    156e9d40352ea2d032108cf75271250b42c39a8b

  • SHA256

    678b111f41be7554198c2ee08971b15fc0952467735e8e4ad31472b048b295af

  • SHA512

    07db52d2a6cff89efb91eeea4a70e8e5646bdbe1d1fa1cffca4e31cd32c804a5faff25ec081961d70a2643ac516adce37e4411ecea928361b926ee73544b3a41

  • SSDEEP

    6144:hJqXUwx14gYnZOJILI1H4jv0edFKTbSpWWUqOWmIUTSo/T:hJqX9x1ynZZIJzQcTbSkWUqO9ugT

Score
10/10

Malware Config

Extracted

Family

vidar

Version

1.5

Botnet

14

C2

https://t.me/dahuasecurit

https://steamcommunity.com/profiles/76561199441999914

Attributes
  • profile_id

    14

Signatures

Files

  • 1816-56-0x0000000000400000-0x0000000000470000-memory.dmp
    .exe windows x86


    Headers

    Sections