General

  • Target

    2432-180-0x0000000000400000-0x0000000000471000-memory.dmp

  • Size

    452KB

  • MD5

    63f7492ae32a65e8f010be7ffbed9c30

  • SHA1

    b31a23a81a098c921f0c19c8c2edbb8cfd9a0a90

  • SHA256

    71191d5b1b39f327925e95c2f7c8192da4f877d574cccb6929de66282a054890

  • SHA512

    a8ab6b2513787f148eb02ecbedcd858113b605074e416318f16666fea12f101c3779422f6af87b276e081d2931a964db523006aedfaf967e17e50c626f28c01c

  • SSDEEP

    6144:xpw8kWACDU/STv8wZlUci6JsjBz+Sf2NktnUTUvn8fslW:Tw8klCOSXlN0Fz+SfW2Kcn80lW

Malware Config

Extracted

Family

vidar

Version

3

Botnet

d6ef050131e7d5a1d595c51613328971

C2

https://t.me/zaskullz

https://steamcommunity.com/profiles/76561199486572327

http://135.181.87.234:80

Attributes
  • profile_id_v2

    d6ef050131e7d5a1d595c51613328971

Signatures

Files

  • 2432-180-0x0000000000400000-0x0000000000471000-memory.dmp
    .exe windows x86


    Headers

    Sections