General
-
Target
3660-701-0x0000000000400000-0x00000000004A1000-memory.dmp
-
Size
644KB
-
MD5
fa99f872432932f28bf4b88ad3d677a0
-
SHA1
24a1ee7e9593a2164d714fff44836c98389cd7c2
-
SHA256
95055c8819847cbe7404eaa47b42d6241e92e9444b2ae3148d49efab4f6cbab4
-
SHA512
44ab8fc06f0acd84e5963bdb60e717c3f82a7cfaaddcbb26897610e5746682f4eee3a2aa885e3bfd64a4154814a20648467d4e90ebc55bb2682a088278380e66
-
SSDEEP
12288:shyTurb4C9y7vJSm1t3aJXMOlabM2jObU2SMvqqcn9rBz3mLEPFzXWxVIc6W:sYTskC9y7BSm1t3aJXMOlabM2CAmvR4q
Malware Config
Extracted
vidar
4.7
https://t.me/eagl3z
https://t.me/eagl3z
https://steamcommunity.com/profiles/76561199159550234
-
profile_id_v2
https://t.me/eagl3z
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1788.0 uacq
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3660-701-0x0000000000400000-0x00000000004A1000-memory.dmp
Headers
Sections