General

  • Target

    2748-187-0x0000000000400000-0x00000000004C2000-memory.dmp

  • Size

    776KB

  • MD5

    0fff56457b13edfcb8b4146cf3e470bc

  • SHA1

    021ed3105c849176fea992033aa922cf3fbd0129

  • SHA256

    9d5d44695f66bee1806fd29450369380e77b06c3850f2371f4fc760d511c9477

  • SHA512

    7092e779ec1681efa0e45e03a08edce19ad664814511fe87aed3c459267e0373a0aca1c5a6528cfa9009fe3338cda238fe55000a502bb182c55fcd0797f70985

  • SSDEEP

    6144:CDZmBlZ87p0vRhZ/u8AfjVO0M9qm9YOUTjOYRLXhMNYuM3:CDZmBi0BA7g0Wqm9XyjOYRLaVM3

Malware Config

Extracted

Family

vidar

Version

3.4

Botnet

e749025c61b2caca10aa829a9e1a65a1

C2

https://steamcommunity.com/profiles/76561199494593681

https://t.me/auftriebs

Attributes
  • profile_id_v2

    e749025c61b2caca10aa829a9e1a65a1

  • user_agent

    Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0

Signatures

Files

  • 2748-187-0x0000000000400000-0x00000000004C2000-memory.dmp
    .exe windows x86


    Headers

    Sections