General

  • Target

    1920-2-0x0000000000400000-0x000000000242E000-memory.dmp

  • Size

    32.2MB

  • MD5

    0f8207068dba0b1ef5fd4a05dde610b2

  • SHA1

    677d8e2355d6cee1a69e717b6debcdd711c851dd

  • SHA256

    9e78cc775638e07cd1726c3541cf9e3397f9c8d7c22e4fd45c23c810064d7333

  • SHA512

    f060561d1b7b2346104316375403fff0aa61f19ff7a57128915a7241ddf795bd314a683d3ccd725a99acd907fbb34acbefe8be1c7be8556c8889b5b6a722aa98

  • SSDEEP

    6144:+MCWtnciHP9qlr82FHFf+nH0WWogSLyBWgvxdBepKqUsTJGW6fo:+MBtnvslrDx+H0xoxUW4xdBepK4mo

Malware Config

Extracted

Family

vidar

Version

5.5

Botnet

4c01b28ecbe8ea0b76de76fda027c366

C2

https://t.me/macstoc

https://steamcommunity.com/profiles/76561199548518734

Attributes
  • profile_id_v2

    4c01b28ecbe8ea0b76de76fda027c366

Signatures

  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1920-2-0x0000000000400000-0x000000000242E000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections