Overview

overview

10

Static

static

10

2696-507-0...ry.exe

windows7-x64

3

2696-507-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2696-507-0x0000000000400000-0x0000000000465000-memory.dmp

  • Size

    404KB

  • MD5

    217cc2f128d7795f525e8da1ab6368fc

  • SHA1

    778c5e25d326be6fe6e74878339a2a384c15a542

  • SHA256

    69abde1d6aeeab7aaee8098e76ac7789641828b66c71bf0951cd3a07e8350b53

  • SHA512

    61ecbd221256078e341b447ee7f1f4232f14468239b69e5a1afd1e0ec7b0165e386dc275382f5bf24759d91b226f5913a9560c6b08181243bad749e4a413a7f6

  • SSDEEP

    6144:OisujIl/IUezxowQpnI4+4uiNIGnRf+xmaZRDZqvhZvd71:Opn/085AyRf+xXDZqzH

Score
10/10
5c0b4a12d6c03dd98ed431d3eded2169vidar

Malware Config

Extracted

Family

vidar

Version

5.7

Botnet

5c0b4a12d6c03dd98ed431d3eded2169

C2

https://steamcommunity.com/profiles/76561199553369541

https://t.me/dastanatg
Attributes
  • profile_id_v2

    5c0b4a12d6c03dd98ed431d3eded2169

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_8) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Safari/605.1.75

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2696-507-0x0000000000400000-0x0000000000465000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections