Overview

overview

10

Static

static

10

1304-55-0x...ry.exe

windows7-x64

1

1304-55-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1304-55-0x0000000000400000-0x0000000000520000-memory.dmp

  • Size

    1.1MB

  • MD5

    b5bd18f88703bd4ab2118ebe79c599e4

  • SHA1

    b0d67ef1d4e2f3c79ebe62695cf1a58023bcb580

  • SHA256

    e15c193bf927224141b14a95ef30b8ba7b5a0055e39bec478dac0f75e1fad650

  • SHA512

    bf03915dd501b18bb664f4cb45ccef3ebee14e9ecc8c0936a44b9fb219fc6d488644637a9338cd6d80530a1dfd3e2b51c180d358466ec4b1595fbcfb66dbc94b

  • SSDEEP

    12288:n0Ht9Tp+l0EqE1can/HVk0bXr5OjRPXSvvhkpTPX3/p:k7TEKScWy0bXrwjR/ukpTPR

Score
10/10
stealer237vidar

Malware Config

Extracted

Family

vidar

Version

9

Botnet

237

C2

http://hotticketsale.com/

Attributes
  • profile_id

    237

Signatures

  • Vidar Stealer 1 IoCs
    stealer
  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1304-55-0x0000000000400000-0x0000000000520000-memory.dmp
    .exe windows x86


    Headers

    Sections