General

  • Target

    1072-130-0x0000000000400000-0x0000000000471000-memory.dmp

  • Size

    452KB

  • MD5

    0787348fde17d27cf17c7cb8674d47b9

  • SHA1

    f5e9c67c93af3f4a499b57beabab05982140fb3e

  • SHA256

    d697662febdba30fbe1aa0445813fa4a43b680c29bb4e9651a1ea69a8dccd6d5

  • SHA512

    5fc06f5b268bd2cf5137098dbcc347b55dc681ffc31672048e00fc7ab44bb9e83ab829a1f1fa26fc3ba63075e02d5d4a31bd85c7a0e7f8a58bac2336eb3094ea

  • SSDEEP

    6144:7Vv/3min9NW2AzQTShI21g6BCW7zfmSazcn4v4xHwyCU5AxuY5KAl:Zv/33ntA8A1phKJcn4vIQysbnl

Malware Config

Extracted

Family

vidar

Version

2.9

Botnet

694f12963bedb0c6040fb3c74aac71e5

C2

https://t.me/nemesisgrow

https://steamcommunity.com/profiles/76561199471222742

http://65.109.12.165:80

Attributes
  • profile_id_v2

    694f12963bedb0c6040fb3c74aac71e5

Signatures

Files

  • 1072-130-0x0000000000400000-0x0000000000471000-memory.dmp
    .exe windows x86


    Headers

    Sections