Overview

overview

10

Static

static

10

4876-338-0...ry.exe

windows7-x64

1

4876-338-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4876-338-0x0000000000400000-0x0000000000471000-memory.dmp

  • Size

    452KB

  • MD5

    16ba31bbae44ba635d982dade82095cf

  • SHA1

    106741b12954b5e8785395e803d214e9c1267611

  • SHA256

    cd5484d5c0e1c5aab56e5f6447f9da401a8b2964cc44044345fb3665d72fdee9

  • SHA512

    0518aa8b1b88dd56a0e4d7fbb3247b3a32d9ee6b71efa8c1c34b126477aab7d640fb8576fecde0bf7fd8172627ec6c340c3d1267547a5e63fd0e1fe3f08fba69

  • SSDEEP

    6144:xpw8kWACDU/STv8wZlUci6JsjBz+Sf2NktnUTU8n8fslW:Tw8klCOSXlN0Fz+SfW2Kvn80lW

Score
10/10
d6ef050131e7d5a1d595c51613328971vidar

Malware Config

Extracted

Family

vidar

Version

3

Botnet

d6ef050131e7d5a1d595c51613328971

C2

https://t.me/zaskullz

https://steamcommunity.com/profiles/76561199486572327

http://135.181.87.234:80
Attributes
  • profile_id_v2

    d6ef050131e7d5a1d595c51613328971

Signatures

Files

  • 4876-338-0x0000000000400000-0x0000000000471000-memory.dmp
    .exe windows x86


    Headers

    Sections