General

  • Target

    1512-143-0x0000000000400000-0x0000000000471000-memory.dmp

  • Size

    452KB

  • MD5

    b11bd635160580183f60961ef447ca83

  • SHA1

    31476798290b672e1993ba452de43bc394ec90e3

  • SHA256

    ee466c253f65339f1663e1747653685b758b6fa376a3c11cf3857902e953a209

  • SHA512

    66762a00253c2c8ff923b025ec522c6272d75ecebcdd27f4acfb3193477201a50673478d2a752c1a983b6b735b1ba2a759e0923666d1239123a14d65879d4126

  • SSDEEP

    6144:xpw8kWACDU/STv8wZlUci6JsjBz+SfsNktnUTUAn8fslW:Tw8klCOSXlN0Fz+SfM2K7n80lW

Malware Config

Extracted

Family

vidar

Version

3

Botnet

d6ef050131e7d5a1d595c51613328971

C2

https://t.me/zaskullz

https://steamcommunity.com/profiles/76561199486572327

http://135.181.87.234:80

Attributes
  • profile_id_v2

    d6ef050131e7d5a1d595c51613328971

Signatures

Files

  • 1512-143-0x0000000000400000-0x0000000000471000-memory.dmp
    .exe windows x86


    Headers

    Sections