General

  • Target

    3404-283-0x0000000000400000-0x000000000046C000-memory.dmp

  • Size

    432KB

  • MD5

    f6918ab63cbcf300a0a5a447f0a4c6a7

  • SHA1

    3ac2a0b9b1df51f9936dd903b6fb8fb795d2f9ad

  • SHA256

    0b2057d91bd8ba688a454a2e05513e30d7de24fb0496a862ed97a7fbb9b30d90

  • SHA512

    db3f6ea07bb0d6576c13cd9b7377afc80393a7e9c62c791fbcb854c03ee6ec3a4c6b3cf099fdcbd4e294ded443e92974451d11ac09b8fa7f34a449e7f9139268

  • SSDEEP

    6144:cDZmBlZ87p0vRhZ/u8AfjVO0M9qm9Y4TjOYRGXhMNJDM:cDZmBi0BA7g0Wqm95jOYRGaBM

Malware Config

Extracted

Family

vidar

Version

3.4

Botnet

623db25256a5734d1207787d269d05b2

C2

https://steamcommunity.com/profiles/76561199494593681

https://t.me/auftriebs

Attributes
  • profile_id_v2

    623db25256a5734d1207787d269d05b2

  • user_agent

    Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0

Signatures

Files

  • 3404-283-0x0000000000400000-0x000000000046C000-memory.dmp
    .exe windows x86


    Headers

    Sections