General
-
Target
1624-323-0x0000000000400000-0x0000000000465000-memory.dmp
-
Size
404KB
-
MD5
aabcb157ce501b6098d7c22a8cd03147
-
SHA1
423823cdc677f5f965866fe59959fb5cdd2876bf
-
SHA256
0821385e9797f6aa4533776b355d1d9aef79fef49712e0f6976ac2bc7498568a
-
SHA512
f159f9bbf3d8ee1ed7df45b65e4bb41a23028b83e119b0b84c7690f53c17872e679a6f6ef8927a228b2458fe357068661075347649facbda11e97651bab53d66
-
SSDEEP
6144:JLhLW8KrV1R/2XJtCTHI41wuBdqv2UxgukIseSq7bmh5er:5horV1p2XQZMv2UxgukIsG7b
Malware Config
Extracted
vidar
5.6
7b01483643983171e949f923c5bc80e7
https://steamcommunity.com/profiles/76561199550790047
https://t.me/bonoboaz
-
profile_id_v2
7b01483643983171e949f923c5bc80e7
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 OPR/103.0.0.0
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1624-323-0x0000000000400000-0x0000000000465000-memory.dmp
Headers
Sections