Overview

overview

10

Static

static

10

2268-46-0x...ry.exe

windows7-x64

1

2268-46-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2268-46-0x0000000000400000-0x0000000000465000-memory.dmp

  • Size

    404KB

  • MD5

    fb0d07f9abc88a5b511ea24a896be23c

  • SHA1

    11d1e6bef08ce4a33b63a3dac4c656e4d35c5970

  • SHA256

    90a01f8bbcf90d782d83af908d0a68e191142e27627439b44965d571633e6905

  • SHA512

    886d815bd40fad409d0c04396a7c3579c7eb626c8f66835f76d12ebeca7c5ac35be17b0b74256e6ee75fcf628b8807b8e126438fae0056401fc727e093dfd00d

  • SSDEEP

    6144:QmTK+XavNsTl/UUa5PI4AFuGIe/EH1/RJwpQ6hO:QYTZoh0EH1/RJweF

Score
10/10
40eaa63b296d256c2181f079611d421fvidar

Malware Config

Extracted

Family

vidar

Version

5.8

Botnet

40eaa63b296d256c2181f079611d421f

C2

https://steamcommunity.com/profiles/76561199555780195

https://t.me/solonichat
Attributes
  • profile_id_v2

    40eaa63b296d256c2181f079611d421f

  • user_agent

    Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.0.0 Safari/537.36

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2268-46-0x0000000000400000-0x0000000000465000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections