General
-
Target
3524-475-0x0000000000400000-0x0000000000471000-memory.dmp
-
Size
452KB
-
MD5
5c9ee0d4be35d6869552160863f7e528
-
SHA1
b09bbf0690b4fe394649f133e29c7ba43f3101ab
-
SHA256
9dadb4e8c69336cd1bcb70b54c2c6b12b7f7def51ad217fcf7d8ddfc4adc8abc
-
SHA512
631f74021c48cb84ae9e00d46d73618d072622f9a1bec80041be6f86afbf68ef3ff12dd9c60456d9eec60ef6801fb90b3b206bc1f52e45053cd624c7a556538f
-
SSDEEP
6144:FjZi5dyACB0iCHcbk8ukYGFOg1i5svEzhLJqfI:FjZgyAmk8uBGYg1i5svEJJq
Score
10/10
Malware Config
Extracted
Family
vidar
Version
3.7
Botnet
31c7719b5ee962fbde376b75e771360d
C2
https://steamcommunity.com/profiles/76561199501059503
https://t.me/mastersbots
Attributes
-
profile_id_v2
31c7719b5ee962fbde376b75e771360d
-
user_agent
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3524-475-0x0000000000400000-0x0000000000471000-memory.dmp
Headers
Sections