General
-
Target
2396-2-0x0000000000400000-0x00000000005C7000-memory.dmp
-
Size
1.8MB
-
MD5
1b9261f3c3d58fd0381b226e98c08f16
-
SHA1
1eb1ee98ca610b640a03869dc131d56b4ac080ae
-
SHA256
464b58be4273c931ce4c3a3ddd79db71e89603e4121ba25cb992eb46a58533fc
-
SHA512
1fd7dbe5d3794905ea228a56f0e892a13e1e1da73fdd910e4f1ef58c486ba8dd78234004feaf6273a5d717c83f033ca72b6f0181f782f1e90ec1b969f10bead2
-
SSDEEP
6144:+A+1e4b30YI1zA7I4ucur1srMPOZcF9IRS/hxLaXD3Pl12:QXbkSlNrmOZcF92SeXDN12
Malware Config
Extracted
vidar
5.9
4841d6b1839c4fa7c20ecc420b82b347
https://steamcommunity.com/profiles/76561199557479327
https://t.me/grizmons
-
profile_id_v2
4841d6b1839c4fa7c20ecc420b82b347
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 OPR/104.0.0.0
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2396-2-0x0000000000400000-0x00000000005C7000-memory.dmp
Headers
Sections