Overview

overview

10

Static

static

10

2548-36-0x...ry.exe

windows7-x64

3

2548-36-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2548-36-0x0000000000400000-0x0000000000465000-memory.dmp

  • Size

    404KB

  • MD5

    bd0dfad5867f43a71be62640b68fdd48

  • SHA1

    c39ddae49bed9e0452931634d0cdaaa53760b282

  • SHA256

    69e2fad54c3a7354eca2addc188d7f14989ebcdf0f36497469a1a3117f8992b5

  • SHA512

    41f2f5c1650168116a0819f34be6d38c78de1239621a852e5957352b85a7401c251bc1c05ecffb0327540d0d2e451d8f8d2f99ac6c651be1e7ca8761887d7837

  • SSDEEP

    6144:TisujIl/IUezxowQpnI4+4uiNIGnRf+xmZZRDZmvhZv:Tpn/085AyRf+xKDZmz

Score
10/10
30d34a76dcc9e4d8606bad857458987cvidar

Malware Config

Extracted

Family

vidar

Version

5.7

Botnet

30d34a76dcc9e4d8606bad857458987c

C2

https://steamcommunity.com/profiles/76561199553369541

https://t.me/dastanatg
Attributes
  • profile_id_v2

    30d34a76dcc9e4d8606bad857458987c

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_8) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Safari/605.1.75

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2548-36-0x0000000000400000-0x0000000000465000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections