General
-
Target
1212-56-0x0000000000400000-0x0000000002580000-memory.dmp
-
Size
33.5MB
-
MD5
221a7cee91e6429ef0bc7be82275fde4
-
SHA1
44ef6bbcc4f71000851fbb82a4a0afecfb92bf5d
-
SHA256
c429b6ddbece87a19472bef6be7758c23c32f24a0bb58215d0bb28a161f400d9
-
SHA512
6393d9dfd7d46d25747ec392b2df2379fa688b3d5d0eb8987bd8df22a5c63a6112582e4e14f4af61a5a97fb9c2d916aef86ce09f9b410939942afacbd2a6051f
-
SSDEEP
6144:7tvmJgFrko8B4/xw8ksPSGbEgajKliSmRvSMhUANbdz/7:7tvmJapksPS4ELIiSKSMNbdz/7
Malware Config
Extracted
vidar
4.1
a247b760bbf343752090be1436805458
https://t.me/task4manager
http://23.88.46.113:80
https://steamcommunity.com/profiles/76561199510444991
-
profile_id_v2
a247b760bbf343752090be1436805458
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 Edg/112.0.1722.34
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1212-56-0x0000000000400000-0x0000000002580000-memory.dmp
Headers
Sections