General
-
Target
3508-137-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
4df338b026564d3b7967e23156ef12d6
-
SHA1
a33566afeac42b37d5e2c84b0b8560bcfcd42639
-
SHA256
b0e194ada991c027467f71eccf682aefc455536c6b10c97c06968c1fe3a03ae1
-
SHA512
88e63e9fa34c779d4d97ad8a9511b32a4c6383c1fc01ca19a7718e65edcec5820801ae859b23980c4aebfd500f83f92e47f1b3bfcd799fee8080d8e5ab53f88b
-
SSDEEP
12288:sib4E1z9tDqi/sV3mHzeZOc+fG7Snbc5:sc1z9hqiC2IOcHWo
Score
10/10
Malware Config
Extracted
Family
vidar
Version
4.6
Botnet
7072c5597a95a19ba8e61ff54768338a
C2
https://steamcommunity.com/profiles/76561199523054520
https://t.me/game4serv
Attributes
-
profile_id_v2
7072c5597a95a19ba8e61ff54768338a
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3508-137-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections