Overview

overview

10

Static

static

10

2032-107-0...ry.exe

windows7-x64

1

2032-107-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2032-107-0x0000000000400000-0x00000000004C5000-memory.dmp

  • Size

    788KB

  • MD5

    3240ef35a68ea39bf42fc96a79f98a1f

  • SHA1

    0aa1a67b6a9466ff7ec4cb39995f384110d63233

  • SHA256

    4a112a7a69ab0956f1654b049ae3db45b64f6a5d11c628cea61947c4454a2b25

  • SHA512

    89dc370d427e013b5d03089b614fca1357f1bc76f60877e27c279e940cdf5fee65769e1ecbc9951dc8587259dd5618fbc77108495771937a2f32550f5a7a01bd

  • SSDEEP

    6144:TBA0i2uim7rAPtf9w8zSRWBt9JPpr+hT9WzYcRh6phk7u1JoH:TG0iwj9w8zS4BPJPpr+pcr0a

Score
10/10
c843bbc9de2edce7a51ceff3be8cb258vidar

Malware Config

Extracted

Family

vidar

Version

4.3

Botnet

c843bbc9de2edce7a51ceff3be8cb258

C2

https://steamcommunity.com/profiles/76561199514261168

https://t.me/kamaprimo
Attributes
  • profile_id_v2

    c843bbc9de2edce7a51ceff3be8cb258

  • user_agent

    Mozilla/5.0 (Linux; U; Tizen 2.0; en-us) AppleWebKit/537.1 (KHTML, like Gecko) Mobile TizenBrowser/2.0

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2032-107-0x0000000000400000-0x00000000004C5000-memory.dmp
    .exe windows x86


    Headers

    Sections