General

  • Target

    2028-54-0x0000000000400000-0x000000000046C000-memory.dmp

  • Size

    432KB

  • MD5

    970e0792b9193c378a55ee4105fe786c

  • SHA1

    5d0750fcc74f90f78974efe968ad59d416edd2bd

  • SHA256

    4de95f5beb474c46304e9cb6eddfdf39c25d61cc4e81b6b3ea8adf68499f338c

  • SHA512

    d58335bd2ddc723f332333257f76da5b07d161bab9ec8557249c8a409cdda082fa1d04e0f3e999f0e25c7ff19635fd8bfc1aba9b9bd1de2e343f63233662f7d8

  • SSDEEP

    6144:RDZmBlZLL/HiTe77ZVBIG31bIzSp6TamF4E7kehqzrPhwAvO:RDZmBDHL2G39wSpCamFfdqzrWkO

Malware Config

Extracted

Family

vidar

Version

3.3

Botnet

1e6f203d28d0cd17be85912cc7cd240d

C2

https://steamcommunity.com/profiles/76561199492257783

https://t.me/justsometg

Attributes
  • profile_id_v2

    1e6f203d28d0cd17be85912cc7cd240d

  • user_agent

    Mozilla/5.0 (X11; Linux 3.5.4-1-ARCH i686; es) KHTML/4.9.1 (like Gecko) Konqueror/4.9

Signatures

Files

  • 2028-54-0x0000000000400000-0x000000000046C000-memory.dmp
    .exe windows x86


    Headers

    Sections