General

  • Target

    2124-370-0x0000000000400000-0x0000000000471000-memory.dmp

  • Size

    452KB

  • MD5

    c16f454875656ebeb3f74f602093aabc

  • SHA1

    b96c285bbc7a19b4128dbc5416e5efbeed7e3233

  • SHA256

    28ce2e64cd87f0ee1b806bdb61eae0248c352146916eac6bb1b8e18685b09f2c

  • SHA512

    9fc378505fddd31b5e6f1f71b32ddad59430fc33b88aab77a4d943796a1e99fb12292722f8bf293967f34ff7a2af912b98ee76d9204e52f7f64c10f0566bf153

  • SSDEEP

    6144:7Vv/3min9NW2AzQTShI21g6BCW7zfmSazcn4v4FHwyCU5AxuX5KAl:Zv/33ntA8A1phKJcn4vAQysgnl

Malware Config

Extracted

Family

vidar

Version

2.9

Botnet

694f12963bedb0c6040fb3c74aac71e5

C2

https://t.me/nemesisgrow

https://steamcommunity.com/profiles/76561199471222742

http://65.109.12.165:80

Attributes
  • profile_id_v2

    694f12963bedb0c6040fb3c74aac71e5

Signatures

Files

  • 2124-370-0x0000000000400000-0x0000000000471000-memory.dmp
    .exe windows x86


    Headers

    Sections