General
-
Target
636-225-0x0000000000400000-0x000000000050D000-memory.dmp
-
Size
1.1MB
-
MD5
47fa11973c57e17a356727406160c124
-
SHA1
435c3d78c689c93c34c34074f139dcb91876ad74
-
SHA256
b434fb60f33f2c29411eb50d09332ec871184ac54f36308106ed350bd99a184a
-
SHA512
c357ad318900c32740e18940cab3c6b3352c75680b2c50f40d15474b9d43a766c96c6141245472fd51438c1db89f97fc08885407f6992ec7ccb00a0f1fec292b
-
SSDEEP
6144:1UNdslLON1aPsi5chCRXmI4/LusZbXm+QRAvNVJCjfhOqU2KYBMYUBK5:1xGwP/OWOxXm+4ARCj+pYKxB
Malware Config
Extracted
vidar
6.1
55d1d90f582be35927dbf245a6a59f6e
https://steamcommunity.com/profiles/76561199563297648
https://t.me/twowheelfun
-
profile_id_v2
55d1d90f582be35927dbf245a6a59f6e
-
user_agent
Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Mobile/15E148 Safari/605.1.15
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
636-225-0x0000000000400000-0x000000000050D000-memory.dmp
Headers
Sections