General
-
Target
856-56-0x0000000000400000-0x0000000002BAC000-memory.dmp
-
Size
39.7MB
-
MD5
1ea6a745900d917da8a64c94a29822bd
-
SHA1
14af196a8edbe0fc479b8a32631a753206aac6b6
-
SHA256
7962095126061372918a2f9455dd5c691703732a804d2bb41a39dccb635078d4
-
SHA512
565e10b3f9df2cb4ee0407c0618d8e7efe41fc7c716e8b59ace7936cc4e8d3afb150d0b2aa513b16db8b82f707057d56b6c1a5f2cd5ca158d88ec6a19213385f
-
SSDEEP
6144:166+X5aG78XAIn2RN2iy3g8UpioUb65qJfbri5bMuCV4aOSqdBFJVjShVH8:16HX5aG782ook65G/id5CV5OvZVj
Malware Config
Extracted
vidar
3.5
2234cb18bdcd93ea6f4e5f1473025a81
https://steamcommunity.com/profiles/76561199497218285
https://t.me/tg_duckworld
-
profile_id_v2
2234cb18bdcd93ea6f4e5f1473025a81
-
user_agent
Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36 Vivaldi/3.7
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
856-56-0x0000000000400000-0x0000000002BAC000-memory.dmp
Headers
Sections