Overview

overview

10

Static

static

10

3520-501-0...ry.exe

windows7-x64

1

3520-501-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3520-501-0x0000000000400000-0x0000000000471000-memory.dmp

  • Size

    452KB

  • MD5

    e765a7a3364aa157867724c9e681cf64

  • SHA1

    bda04d5b5d55fe1d7c1bce5e2992d4013ae050ea

  • SHA256

    e8ea9be8267daf73cf5c357ceae402f0f28a138340d730865d443aadea4be26f

  • SHA512

    e3306ce057ba4ed1d90fc0dfde761b34f33b0026d87e5276a5d308c09c6ecdb24c8f269c8f7b6c0034b5af9ff1e3e70a8ed645538a6eba92ab5615fc15db4c48

  • SSDEEP

    6144:7Vv/3min9NW2AzQTShI21g6BCW7zfmSazcn4v4HHwyCU5Ax5xmKAl:Zv/33ntA8A1phKJcn4vKQysR+l

Score
10/10
694f12963bedb0c6040fb3c74aac71e5vidar

Malware Config

Extracted

Family

vidar

Version

2.9

Botnet

694f12963bedb0c6040fb3c74aac71e5

C2

https://t.me/nemesisgrow

https://steamcommunity.com/profiles/76561199471222742

http://65.109.12.165:80
Attributes
  • profile_id_v2

    694f12963bedb0c6040fb3c74aac71e5

Signatures

Files

  • 3520-501-0x0000000000400000-0x0000000000471000-memory.dmp
    .exe windows x86


    Headers

    Sections