Overview

overview

10

Static

static

10

1904-56-0x...ry.exe

windows7-x64

1

1904-56-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1904-56-0x0000000000400000-0x000000000046B000-memory.dmp

  • Size

    428KB

  • MD5

    37575f5e19b2035bb9a97528c4563fe7

  • SHA1

    41d6bd3ae216ab717ce171b7d2946039c03238ee

  • SHA256

    ca9a30924b09e50d140613c986bb492bca157759bad945d931339fc8be964b30

  • SHA512

    86eee96cdfc3643a5ff6c7744349db667feca255b5534780ca149fb1482c6610b3d47f51d1b642fd4f29dad4a027096d95c66dcf439fff252ef0e335b7255e0e

  • SSDEEP

    6144:lua5z4XeLqMVc2Uc1ax/QfTyuAlHKdlJP0KPah6wu2Ai0qvF:lV5z4XPMPA/QryvodlJP0KPTOF

Score
10/10
d5e8b791e26fe86b4237c5e6d65ae7fdvidar

Malware Config

Extracted

Family

vidar

Version

3.8

Botnet

d5e8b791e26fe86b4237c5e6d65ae7fd

C2

https://steamcommunity.com/profiles/76561198272578552

https://t.me/libpcre
Attributes
  • profile_id_v2

    d5e8b791e26fe86b4237c5e6d65ae7fd

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36 Vivaldi/3.7

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1904-56-0x0000000000400000-0x000000000046B000-memory.dmp
    .exe windows x86


    Headers

    Sections