General
-
Target
3976-274-0x0000000000400000-0x000000000046A000-memory.dmp
-
Size
424KB
-
MD5
36d26828f51a73c0b0d501ed212dcc62
-
SHA1
0acafee074ce564f7651f7ef22ca0fc4a6359cc8
-
SHA256
27a99b78f1708ce75e71ffb16e463509e20d0181bb3b4552a8e1334f28575564
-
SHA512
fae321f64e88dea1208eaf9ee2e6b71dc7b3f098dd313ec0abfe95a379283f0619d6f1daa2bb2dda7f9352e8aab20aa08d01992b70c40b9c9a3dac99be5751d9
-
SSDEEP
6144:zt7w69i2IiSi37j6uADO72myabHdNK/Ai3OTSq8hrJRT9KpjR:zt7w6KMGe72my8HfVi3cSqKp9qjR
Malware Config
Extracted
vidar
4.1
c784f88cbd0064e2b88a2354266d33ad
https://steamcommunity.com/profiles/76561199510444991
https://t.me/task4manager
-
profile_id_v2
c784f88cbd0064e2b88a2354266d33ad
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 Edg/112.0.1722.34
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3976-274-0x0000000000400000-0x000000000046A000-memory.dmp
Headers
Sections