General

  • Target

    1100-56-0x0000000000400000-0x000000000081B000-memory.dmp

  • Size

    4.1MB

  • MD5

    32c453a2e2bdd5e827c3e610d23f9f17

  • SHA1

    cc15060532a530f33a2e75f6464e83769937909b

  • SHA256

    96d118ef734e3c52ab9945d4fa3d363d2c70ba27403bb2bba145136f05985926

  • SHA512

    e9b94e58a95c3339b58a189b859ed7e08cd46592c21a8796ff48e79010e83125fa1ec04168a80a13277d114a72023ebf5c95cb5e732bdd7207126a91547d3256

  • SSDEEP

    6144:CDZmBlZ87p0vRhZ/u8AfjVO0M9qm9YSTjOYRLXhMNOzMJunlCV+4:CDZmBi0BA7g0Wqm9HjOYRLaSMJolCVH

Malware Config

Extracted

Family

vidar

Version

3.4

Botnet

e749025c61b2caca10aa829a9e1a65a1

C2

https://steamcommunity.com/profiles/76561199494593681

https://t.me/auftriebs

Attributes
  • profile_id_v2

    e749025c61b2caca10aa829a9e1a65a1

  • user_agent

    Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0

Signatures

Files

  • 1100-56-0x0000000000400000-0x000000000081B000-memory.dmp
    .exe windows x86


    Headers

    Sections