General
-
Target
2352-382-0x0000000000400000-0x00000000005C2000-memory.dmp
-
Size
1.8MB
-
MD5
ff8bf01cbe9779cb9b4d38e06f4176a5
-
SHA1
e97882d881c0c6d2132b48f1ed861603727e2026
-
SHA256
4e497778e018582b0e24d2e18092d5ac2261651c3fe687c41f8d117c5e42b944
-
SHA512
79c31b7ad7eeb1402f953e63cefe57d3788fed5efac1f1e3f4034ce78af27ba0989cbd549bf5dd1249aba5da306761ba1eb40da2e8004b539bb130d35851bcbd
-
SSDEEP
6144:+A+1e4b30YI1zA7I4ucur1srMPOZcFVIRS/hxzEXD3Pl4V:QXbkSlNrmOZcFV2SYXDNa
Malware Config
Extracted
vidar
5.9
4841d6b1839c4fa7c20ecc420b82b347
https://steamcommunity.com/profiles/76561199557479327
https://t.me/grizmons
-
profile_id_v2
4841d6b1839c4fa7c20ecc420b82b347
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 OPR/104.0.0.0
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2352-382-0x0000000000400000-0x00000000005C2000-memory.dmp
Headers
Sections