General

  • Target

    2868-175-0x0000000000400000-0x00000000004CA000-memory.dmp

  • Size

    808KB

  • MD5

    004a35498712759bb304ac6185364414

  • SHA1

    4b1c150a935377b51b7067b0f7861bef0261f0f0

  • SHA256

    5428412187eac71a9f8972dd1a23699b69e6deb46fe1b4ca3a64f34d029e7bf1

  • SHA512

    88a6a1f093d1ec3782acf650d49b96595baa0f4ea7f659f2b1c465fd6672c5de18881630bb2f2228ff15589aec6c46ed620fc838e26023994d4b6a1fb9e11664

  • SSDEEP

    6144:CDZmBlZ87p0vRhZ/u8AfjVO0M9qm9YRTjOYRLXhMNJLMhC5:CDZmBi0BA7g0Wqm9yjOYRLaxMhC5

Malware Config

Extracted

Family

vidar

Version

3.4

Botnet

e749025c61b2caca10aa829a9e1a65a1

C2

https://steamcommunity.com/profiles/76561199494593681

https://t.me/auftriebs

Attributes
  • profile_id_v2

    e749025c61b2caca10aa829a9e1a65a1

  • user_agent

    Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0

Signatures

Files

  • 2868-175-0x0000000000400000-0x00000000004CA000-memory.dmp
    .exe windows x86


    Headers

    Sections