General
-
Target
1276-56-0x0000000000400000-0x00000000006EB000-memory.dmp
-
Size
2.9MB
-
MD5
9f330c23e831aa88a4d1326eddcf8686
-
SHA1
c6be7175f5c38ad9625489b99318cc3cea8cac32
-
SHA256
a84cdce17603ee573db611766b8dec9079c81800f6c1a32b0bb55481127af1b0
-
SHA512
5af3fbc1abe093ede77ae32b7e404d5eb87246648aa42a832102bd437dae0ee52edb33b9f71bf45bffefc4d7ad1de1e87af137ccd003a1ba2de66b8f59d77fd2
-
SSDEEP
6144:7tvmJgFrko8B4/xw8ksPSGbEgajKliSmRfSMhUuNbdz/xvo0:7tvmJapksPS4ELIiSSSSNbdz/2
Malware Config
Extracted
vidar
4.1
a247b760bbf343752090be1436805458
https://t.me/task4manager
http://23.88.46.113:80
https://steamcommunity.com/profiles/76561199510444991
-
profile_id_v2
a247b760bbf343752090be1436805458
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 Edg/112.0.1722.34
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1276-56-0x0000000000400000-0x00000000006EB000-memory.dmp
Headers
Sections