Overview

overview

10

Static

static

10

1560-54-0x...ry.exe

windows7-x64

1

1560-54-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1560-54-0x0000000000360000-0x00000000003D2000-memory.dmp

  • Size

    456KB

  • MD5

    8b10937a213c5860e61236fd3a50c8f8

  • SHA1

    66a51e79156bd300c87298d0e53884b7b80f65ff

  • SHA256

    02345be4bcd299f4628aafbd7cc51196b9176d57e68eca623bb8161438784382

  • SHA512

    927525cdc68ffbbad67933586774487a3a7fb759b5cee873331d54ef6f6a44edeb0e4eaf9a5a694395704aa9d70799019a43510eecc41892eae30801f17cef80

  • SSDEEP

    12288:Lr0W5GNCAqPMoBHlY/qUbHeNuhDV9c6wF2:LrzAqPMoPY/qUbcMh9MM

Score
10/10
897vidar

Malware Config

Extracted

Family

vidar

Version

2.4

Botnet

897

C2

https://t.me/gurutist

https://steamcommunity.com/profiles/76561199476091435

http://95.216.164.28:80
Attributes
  • profile_id

    897

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36

Signatures

Files

  • 1560-54-0x0000000000360000-0x00000000003D2000-memory.dmp
    .exe windows x86


    Headers

    Sections