General
-
Target
1476-56-0x0000000000400000-0x0000000002D0B000-memory.dmp
-
Size
41.0MB
-
MD5
23fa0b7bf917aa4ba396c6192a90783d
-
SHA1
dcad5badc42eb91cbf04500d9470eb30ddbb8069
-
SHA256
a0e494b7cefe7d2282f5aeb1fe975feab46fceea671675c415f28b9b4d28e0ec
-
SHA512
072cfec73bbaff4f4c1ae41ae8093a576aacc0ed36f95959811d7e28b2fa47d69c51db437f1d9c63e9be0b6e8c1bb9d9e9a9d1809e63c3eb2bbe15d3c9080c0c
-
SSDEEP
6144:7tvmJgFrko8B4/xw8ksPSGbEgajKliSmRVSMhUcNbdz/B31C:7tvmJapksPS4ELIiSISgNbdz/Z
Malware Config
Extracted
vidar
4.1
a247b760bbf343752090be1436805458
https://t.me/task4manager
http://23.88.46.113:80
https://steamcommunity.com/profiles/76561199510444991
-
profile_id_v2
a247b760bbf343752090be1436805458
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 Edg/112.0.1722.34
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1476-56-0x0000000000400000-0x0000000002D0B000-memory.dmp
Headers
Sections