General

  • Target

    1116-56-0x0000000000400000-0x0000000000A22000-memory.dmp

  • Size

    6.1MB

  • MD5

    4a08b3dc7d9a9923e9c2b467bb27b0aa

  • SHA1

    669aafb805761564f67fe6e77723c611f81d8428

  • SHA256

    57b706e38139c83c4bf9bdca0280cedf3f5185c91d75a71a37fca748bc07a9a7

  • SHA512

    cbf6df317fbb79747ae12c84d23d928a6953ab7e8be28a455db004ee9de333ad063a1c01ee2bf97a94e00c977d5951f88f1b09a18ef0a8aaa2a035c6b35fcddb

  • SSDEEP

    196608:I0nAVcO0jG9bTIYAuTHYIDX4mR4JdnW3aj:UVcfjGJTIYpHvIe4DW

Malware Config

Extracted

Family

vidar

Version

3

Botnet

ef400d64ade8db9c118b69928da0152d

C2

https://t.me/zaskullz

https://steamcommunity.com/profiles/76561199486572327

http://135.181.87.234:80

Attributes
  • profile_id_v2

    ef400d64ade8db9c118b69928da0152d

Signatures

Files

  • 1116-56-0x0000000000400000-0x0000000000A22000-memory.dmp
    .exe windows x86


    Headers

    Sections