Overview

overview

10

Static

static

10

2248-484-0...ry.exe

windows7-x64

1

2248-484-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2248-484-0x0000000000400000-0x0000000000465000-memory.dmp

  • Size

    404KB

  • MD5

    16dd112013fbfe05786bf67541ea2593

  • SHA1

    aba4090451da07ff4e86c0bac3fe0406687fed56

  • SHA256

    c254903698977cdf39395be43a165d9aaa755c7a20566bc9115d971b9920f4ab

  • SHA512

    b7040bafb7593b44fb7dd4d0fb17bb8d2617ccd94a03995f646a02fbd8d2feecc8c9a19894efceb783ec42770c0bd356dc732f1e70fac536415e348f898b5401

  • SSDEEP

    6144:JLhLW8KrV1R/2XJtCTHI41wuBdqv2UxguAIseSq7bmh5hr:5horV1p2XQZMv2UxguAIsG7b

Score
10/10
7b01483643983171e949f923c5bc80e7vidar

Malware Config

Extracted

Family

vidar

Version

5.6

Botnet

7b01483643983171e949f923c5bc80e7

C2

https://steamcommunity.com/profiles/76561199550790047

https://t.me/bonoboaz
Attributes
  • profile_id_v2

    7b01483643983171e949f923c5bc80e7

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 OPR/103.0.0.0

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2248-484-0x0000000000400000-0x0000000000465000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections