General
-
Target
2460-551-0x0000000000400000-0x00000000005C0000-memory.dmp
-
Size
1.8MB
-
MD5
8ca5b94ea166a6db6f7ee9843a5d3a6c
-
SHA1
7f1cd28f2551a5c57195a0dad1548e1659941383
-
SHA256
2c0b0407c16b1b6e9385399d1ad26d81bc2382b3801e41670df616d97c5be7f8
-
SHA512
9ba09ddec73c1a76055767b115ba879aeed320a542c63d77c7e559685d48f68dc8102baaa40be397acb4b53f6a1dc0286a5262f001c07edd5ea5bc86d4d233c3
-
SSDEEP
6144:+A+1e4b30YI1zA7I4ucur1srMPOZcF9IRS/hxzc8XD3PlJy:QXbkSlNrmOZcF92StXDNJ
Malware Config
Extracted
vidar
5.9
4841d6b1839c4fa7c20ecc420b82b347
https://steamcommunity.com/profiles/76561199557479327
https://t.me/grizmons
-
profile_id_v2
4841d6b1839c4fa7c20ecc420b82b347
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 OPR/104.0.0.0
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2460-551-0x0000000000400000-0x00000000005C0000-memory.dmp
Headers
Sections