General
-
Target
4320-257-0x0000000000400000-0x00000000004A1000-memory.dmp
-
Size
644KB
-
MD5
e9cf6f40ab067a7ff1bf2b051bd19034
-
SHA1
d70844412eb124e554825d3beacf1795857415a2
-
SHA256
da7e01bb5e3d6970400a76b00a49c15b6f7ffc67754f3d2ea74ee0eb2518de66
-
SHA512
d6d5c5906faf5e066d3d666f945b7febc795d679b6ff5ee612e7498c4a878dfbc688f2f3ee1edb8099f842ede26aad20e070e65f62294d2ba829739a35f34bc5
-
SSDEEP
12288:shyTurb4C9y7vJSm1t3aJXMOlabM2jObU2SMvnqcn9rBz3mLEPFzXWxVIc6G:sYTskC9y7BSm1t3aJXMOlabM2CAmvq4S
Malware Config
Extracted
vidar
4.7
https://t.me/eagl3z
https://t.me/eagl3z
https://steamcommunity.com/profiles/76561199159550234
-
profile_id_v2
https://t.me/eagl3z
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1788.0 uacq
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4320-257-0x0000000000400000-0x00000000004A1000-memory.dmp
Headers
Sections