Overview

overview

10

Static

static

10

2920-9-0x0...ry.exe

windows7-x64

1

2920-9-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2920-9-0x00000000008A0000-0x0000000000911000-memory.dmp

  • Size

    452KB

  • MD5

    8d326efc8e1fdd2945c3ab0dcb2345cb

  • SHA1

    66d0e7ee2cebed865c82d13c5c9f92df554b608f

  • SHA256

    e65bfde492a3b10413b3325dfefa7ef0826a7bf636c96076bd2919d4bcd20c23

  • SHA512

    873708cf9edd69cb47ba88f49757444af08eba70b0bcf8fb3e4ebe29943fbc988058ad8e8a36a3b72fe890331893bc2c0882f2259ff5ab55c46d1120be4325f8

  • SSDEEP

    6144:7TEBzUqJDG9ge/znmaEl71yYa4uyx86YJzN1epUyUfzAGW:nEBz49NjEnyH4N86YJzN1epUx6

Score
10/10
f34dc6ebbe838f4d3a77acff99370502vidar

Malware Config

Extracted

Family

vidar

Version

5.5

Botnet

f34dc6ebbe838f4d3a77acff99370502

C2

https://t.me/macstoc

https://steamcommunity.com/profiles/76561199548518734
Attributes
  • profile_id_v2

    f34dc6ebbe838f4d3a77acff99370502

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2920-9-0x00000000008A0000-0x0000000000911000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections