vidar | 2800-241-0x0000000000400000-0x0000000000476000-memory[.]dmp

General

Target

2800-241-0x0000000000400000-0x0000000000476000-memory.dmp
Size

472KB
MD5

7d4f0b3cdf2329c71ba9c0160b13fc07
SHA1

3aeaf8a274a1a3dfea95b2b290cbd4da87a0b232
SHA256

488f71154900465f0a9cf77742a28a8789482e119bfdc0a4feaee703bae9882c
SHA512

a9fc1c1ff46afe16dce6ead893a3c86cb550118144445f5869ba47f25b6040cc68af8c3c0eb4952e6d8e847050aca40ee7921901180a312ef24fde1d8f31aa79
SSDEEP

6144:nCyiXVZhMMOP/AXh/PP6IEWEonebA8mUG05UJKH2khp9j5kz+i9moRQ1Jg4Eahrq:ndiXZMbKCxWIW+kmoRQ124EyiPMIn

Score

10^/10

Family

vidar

Version

4.5

Botnet

75b38583a079a9212c1fa894fd1b945f

C2

https://steamcommunity.com/profiles/76561199520592470

https://t.me/motafan

Attributes

profile_id_v2
75b38583a079a9212c1fa894fd1b945f
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/111.0

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2800-241-0x0000000000400000-0x0000000000476000-memory.dmp