Overview

overview

10

Static

static

10

1320-56-0x...ry.exe

windows7-x64

1320-56-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1320-56-0x0000000000400000-0x0000000000CFD000-memory.dmp

  • Size

    9.0MB

  • MD5

    e383177e93895db043c01d5f5d5e4901

  • SHA1

    b2857e9006ac3f42c78f3cd2e16b3dd919209402

  • SHA256

    2de42dd8ff780cc781ba384e6d5203c10d0cff839fa56fbe5bee2b62cc068492

  • SHA512

    1996e4060391b95ef700e233b51223d86bc46a4bbb0f7f17569713e9e12007de81ea326fbe054d8fe589372e8f1772c70b393d25542ff0bb4c19b29b467ea646

  • SSDEEP

    196608:l9AERVevb2aFS+zuoNs893ytaX8WufibsbToRx:EE/evb2IDuoNaafbAbTi

Score
10/10
028df6cbdba463e023821488293c91a1vidar

Malware Config

Extracted

Family

vidar

Version

3

Botnet

028df6cbdba463e023821488293c91a1

C2

https://t.me/zaskullz

https://steamcommunity.com/profiles/76561199486572327

http://135.181.87.234:80
Attributes
  • profile_id_v2

    028df6cbdba463e023821488293c91a1

Signatures

Files

  • 1320-56-0x0000000000400000-0x0000000000CFD000-memory.dmp
    .exe windows x86


    Headers

    Sections