Overview

overview

10

Static

static

10

1064-56-0x...ry.exe

windows7-x64

1

1064-56-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1064-56-0x0000000000400000-0x000000000081A000-memory.dmp

  • Size

    4.1MB

  • MD5

    d2d16357e80dfc5b5ed7349b676ac4ee

  • SHA1

    29a34e7259749aada141138285e57ca1f6b560bc

  • SHA256

    9060c8cfe7800479eba450c6feaec1229779f0e3a177da561946a9054b686c29

  • SHA512

    9ae414328304a0a994379cb2c3718f2c67be91715c3b58c3c2a77b2bde7dd8f4bf0018435359e9420ae268be5e30a17540e39b30715df4a5adf2eb722a4a8844

  • SSDEEP

    6144:CDZmBlZ87p0vRhZ/u8AfjVO0M9qm9YDTjOYRLXhMNOcMRFwjCV+:CDZmBi0BA7g0Wqm9UjOYRLa1MR8CV

Score
10/10
e749025c61b2caca10aa829a9e1a65a1vidar

Malware Config

Extracted

Family

vidar

Version

3.4

Botnet

e749025c61b2caca10aa829a9e1a65a1

C2

https://steamcommunity.com/profiles/76561199494593681

https://t.me/auftriebs
Attributes
  • profile_id_v2

    e749025c61b2caca10aa829a9e1a65a1

  • user_agent

    Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0

Signatures

Files

  • 1064-56-0x0000000000400000-0x000000000081A000-memory.dmp
    .exe windows x86


    Headers

    Sections