General
-
Target
1140-207-0x0000000000400000-0x0000000000465000-memory.dmp
-
Size
404KB
-
MD5
784d91e32430a2412e6da5d64e06ae60
-
SHA1
3a39f61217914aa1fb3231a833ed59b94204036a
-
SHA256
ff2eb8204ed1043be8ece620931fb7c7bdf0ae6f7799e930a6a9b639e236db4b
-
SHA512
ec71c3a72c711f8f8287c1b62b97af77ba511bf002d6ef0f6e52bf7029cd43f078786348880f2baa78ae009f20f4d691bd5471f37e436a73880151ae9ce5d899
-
SSDEEP
6144:cUNdslLON1aPsi5chCRXmI4/LusZbXm+QRAvNVJCcfhOqU2ZBMYUB:cxGwP/OWOxXm+4ARCc+qKxB
Malware Config
Extracted
vidar
6.1
13088c19c5a97b42d0d1d9573cc9f1b8
https://steamcommunity.com/profiles/76561199563297648
https://t.me/twowheelfun
-
profile_id_v2
13088c19c5a97b42d0d1d9573cc9f1b8
-
user_agent
Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Mobile/15E148 Safari/605.1.15
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1140-207-0x0000000000400000-0x0000000000465000-memory.dmp
Headers
Sections