General
-
Target
3040-138-0x0000000000400000-0x00000000004B3000-memory.dmp
-
Size
716KB
-
MD5
2c32b7b6f9248f34d40ba3a95c643cce
-
SHA1
bd634b093804c66c783c4f1dcdda8801354d5c5d
-
SHA256
feb361f0c1b9f3f725645b5a8bdde7d4a4fc825fb4d77aedc864ab543509928c
-
SHA512
c515685323d772c672ccfe027816bda610120e9d4f30d6f0759e1ae0525c79dc9bae63a3c651d539a57bbd80d99e7f16fa341799259e8b56a535f15171ca4687
-
SSDEEP
12288:rhyTurb4C9y7vJSm1t3aJXMOlabM2jObU2SMvTqFn9rBz3mLEPFzXWxVIc6Y:rYTskC9y7BSm1t3aJXMOlabM2CAmvuxc
Malware Config
Extracted
vidar
4.7
https://t.me/eagl3z
https://t.me/eagl3z
https://steamcommunity.com/profiles/76561199159550234
-
profile_id_v2
https://t.me/eagl3z
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1788.0 uacq
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3040-138-0x0000000000400000-0x00000000004B3000-memory.dmp
Headers
Sections