General

  • Target

    3184-292-0x0000000000400000-0x0000000000471000-memory.dmp

  • Size

    452KB

  • MD5

    bc191f2c898e1aff639f19ac687875ff

  • SHA1

    39808cee3bd0cc369168e13d8f40b8e53a3c91ab

  • SHA256

    b9b6b491e9ccefe5427a4a7de7e7731ee77f3e57b5ee8e6d2418d46dc18d3aa2

  • SHA512

    c5fbc74af9afe1111e978b8744a9455661b7a288ec46b960a8c37b0c64caf4b4f41cdb6a0cd226a442008a7bc343679dfb2c8c298946444eb5e2d0c96cde3ff2

  • SSDEEP

    6144:xpw8kWACDU/STv8wZlUci6JsjBz+Sf2NktnUTUYn8fslW:Tw8klCOSXlN0Fz+SfW2KLn80lW

Malware Config

Extracted

Family

vidar

Version

3

Botnet

d6ef050131e7d5a1d595c51613328971

C2

https://t.me/zaskullz

https://steamcommunity.com/profiles/76561199486572327

http://135.181.87.234:80

Attributes
  • profile_id_v2

    d6ef050131e7d5a1d595c51613328971

Signatures

Files

  • 3184-292-0x0000000000400000-0x0000000000471000-memory.dmp
    .exe windows x86


    Headers

    Sections