General

  • Target

    2204-404-0x0000000000400000-0x00000000004B4000-memory.dmp

  • Size

    720KB

  • MD5

    35f859b84987f112d78bf66f1c430f3a

  • SHA1

    a1f7320fc0bd1aac37d3925e39fbacfed8d1b12c

  • SHA256

    c1327ec769d8a3532329bb65baf117c406bb596fb246b93efaaa5caf21624e17

  • SHA512

    e1df69fc5f83aeef61c1408cd4b4a5eaebedda3575112592166a5e9f6366db5028e82196b519500f06e3f98ab0d020bc9697e4c551bf346c6b8af6eb7545a346

  • SSDEEP

    12288:zhyTurb4C9y7vJSm1t3aJXMOlabM2jObU2SMv3q2n9rBz3mLEPFzXWxVIc6S:zYTskC9y7BSm1t3aJXMOlabM2CAmv6e+

Malware Config

Extracted

Family

vidar

Version

4.7

Botnet

https://t.me/eagl3z

C2

https://t.me/eagl3z

https://steamcommunity.com/profiles/76561199159550234

Attributes
  • profile_id_v2

    https://t.me/eagl3z

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1788.0 uacq

Signatures

  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2204-404-0x0000000000400000-0x00000000004B4000-memory.dmp
    .exe windows x86


    Headers

    Sections