Overview

overview

10

Static

static

10

1304-62-0x...ry.exe

windows7-x64

3

1304-62-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1304-62-0x0000000000400000-0x000000000046A000-memory.dmp

  • Size

    424KB

  • MD5

    7942b5b4ba86ea82b86f6c054fed6150

  • SHA1

    0af0eac9497bb5c236c85d9b41a154cc1b353afa

  • SHA256

    f54dc983e434b5b0237f4818819c25f2cc6a625f4c14e2e328ded1a0b4adc982

  • SHA512

    c6a2a00506e0f7638e80918a6a371d56b72f49646dfc27d56719c92761573ffe68ec5e4ffe34e192ebf1fc67beb3dc0f5394adf9d974d4bd0212dbc21b0bda22

  • SSDEEP

    6144:jBcgHq3cDh0zuao5sQyAFCx2HI8w1ih8Wzq84h:jegHfDuQLFCYHT2ihe8

Score
10/10
e48f2ea771d2a269e0941d229a73ad62vidar

Malware Config

Extracted

Family

vidar

Version

4.3

Botnet

e48f2ea771d2a269e0941d229a73ad62

C2

https://steamcommunity.com/profiles/76561199514261168

https://t.me/kamaprimo
Attributes
  • profile_id_v2

    e48f2ea771d2a269e0941d229a73ad62

  • user_agent

    Mozilla/5.0 (Linux; U; Tizen 2.0; en-us) AppleWebKit/537.1 (KHTML, like Gecko) Mobile TizenBrowser/2.0

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1304-62-0x0000000000400000-0x000000000046A000-memory.dmp
    .exe windows x86


    Headers

    Sections