General
-
Target
1392-56-0x0000000000400000-0x0000000000694000-memory.dmp
-
Size
2.6MB
-
MD5
8461b31d27b3d2500c4015c57fa8f507
-
SHA1
8277f91d9925048e6ae500a04f651870f7185dfc
-
SHA256
b1abfedce230b9cc091f2544b657903efcecc332d74f246670ff7d6dd71f5925
-
SHA512
284bc87a7fbd6dfb0e32ea79c28801e791b37bcadd85aa55d67e07909cc9bddb9f6cedf41c4b52b6c0df523ffe5e8ce9ab3daa0e32477e3c895f576bb852fec5
-
SSDEEP
6144:7tvmJgFrko8B4/xw8ksPSGbEgajKliSmR3SMhUZZNbdz/I:7tvmJapksPS4ELIiSCSdZNbdz/I
Malware Config
Extracted
vidar
4.1
a247b760bbf343752090be1436805458
https://t.me/task4manager
http://23.88.46.113:80
https://steamcommunity.com/profiles/76561199510444991
-
profile_id_v2
a247b760bbf343752090be1436805458
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 Edg/112.0.1722.34
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1392-56-0x0000000000400000-0x0000000000694000-memory.dmp
Headers
Sections