General

  • Target

    4440-338-0x0000000000400000-0x0000000000471000-memory.dmp

  • Size

    452KB

  • MD5

    0b56370ee30227e60ce1f222c9410f4f

  • SHA1

    b01723292ed6fdd7f49e86f2bc0d880593a87a15

  • SHA256

    68b1e91ade019ee7500b415d0c63649dc104aa2e9c97aa02ce5c366415807d00

  • SHA512

    39df8a62b1e90ec2394d5f59b8382a23d18b8312262deaafef4937301059eff362230eb6b8ea4e7a1270c474327aa7f8226ea2215f4f76c4db7faa8cfb03eae3

  • SSDEEP

    6144:xpw8kWACDU/STv8wZlUci6JsjBz+SfBNktnUTUgn8fslW:Tw8klCOSXlN0Fz+SfP2Krn80lW

Malware Config

Extracted

Family

vidar

Version

3

Botnet

d6ef050131e7d5a1d595c51613328971

C2

https://t.me/zaskullz

https://steamcommunity.com/profiles/76561199486572327

http://135.181.87.234:80

Attributes
  • profile_id_v2

    d6ef050131e7d5a1d595c51613328971

Signatures

Files

  • 4440-338-0x0000000000400000-0x0000000000471000-memory.dmp
    .exe windows x86


    Headers

    Sections