vidar | 2308-19-0x0000000000400000-0x000000000246C000-memory[.]dmp

General

Target

2308-19-0x0000000000400000-0x000000000246C000-memory.dmp
Size

32.4MB
MD5

af18b9344f339beafaff5da49e8f553a
SHA1

7e4e0ffdad5b91ca9708dd50dc100ab85ade1f50
SHA256

6940522e2041fd152536e7a1cec3c2e8635a928d1bfbeb376132ba5778636d31
SHA512

49834bf20a2c7931a167a669f0ad442117745fb8513668d6409a0ab038147ed127d4289afbfaaf2c0460273b6f1aba1c6c6a8593bfba99cd91725cbfead825b3
SSDEEP

12288:nNvC1zqjETs1z/hVBzeC+SnI6pIby1gLUeL/:NvnQTs1zhnzTI6au1gLHL/

Score

10^/10

Family

vidar

Version

5.4

Botnet

b2ced91faf30889899f34458f95b8e93

C2

https://t.me/vogogor

https://steamcommunity.com/profiles/76561199545993403

Attributes

profile_id_v2
b2ced91faf30889899f34458f95b8e93
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.2.13 (KHTML, like Gecko) Version/16.5.2 Safari/605.2.13

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2308-19-0x0000000000400000-0x000000000246C000-memory.dmp