Overview

overview

10

Static

static

10

904-107-0x...ry.exe

windows7-x64

1

904-107-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    904-107-0x0000000000400000-0x0000000002D05000-memory.dmp

  • Size

    41.0MB

  • MD5

    37bbb1a109cc7b754d4d97b3bec1a3a4

  • SHA1

    17bc0d4e2b207fbc49ffb83059311c818089fd90

  • SHA256

    2680cd0acd0f39366f0b271bd4f04cc2dc958c8108be1abca309ba8a69a9e1a5

  • SHA512

    7f2ae368b12c7fbe3fc92d34447e2594faa02f9905be07199d695665827476709786d1a0fc6f27c1f2769cf2cfeef58e4de77214bf6c1b421e81576850edfb99

  • SSDEEP

    6144:Jt7w69i2IiSi37j6uADO72myabHdNK/Ai3Omz8hrJg19KpjR:Jt7w6KMGe72my8HfVi3PzKE9qjR

Score
10/10
d9c2540e47e407e8583b8f216d586270vidar

Malware Config

Extracted

Family

vidar

Version

4.1

Botnet

d9c2540e47e407e8583b8f216d586270

C2

https://steamcommunity.com/profiles/76561199510444991

https://t.me/task4manager
Attributes
  • profile_id_v2

    d9c2540e47e407e8583b8f216d586270

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 Edg/112.0.1722.34

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 904-107-0x0000000000400000-0x0000000002D05000-memory.dmp
    .exe windows x86


    Headers

    Sections