Overview

overview

10

Static

static

10

4528-2-0x0...ry.exe

windows7-x64

3

4528-2-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    4528-2-0x0000000000400000-0x0000000000509000-memory.dmp

  • Size

    1.0MB

  • MD5

    d1673c44705f5c5fc36cfde3bfde5b50

  • SHA1

    33ea62555daec1c7c85cc3473801bfe62f46591f

  • SHA256

    5748ac20fdf5ff7b16c13e1f7e175da867fcdbee449f5c891c658bbd9acf7247

  • SHA512

    078a43289a9dda9ad30cb6dcb533ea2e4a809f8f4902b59993c7e923c658374e5b62c62fd7a000ae05cdc25bc501d58c2988aba4a14eb842981f252450a59b02

  • SSDEEP

    6144:9Z4ZJ7oMzXpdF2AX2RvzI4TJu1lnTZc4GX1TOh2P29bnA:9a8wpCRv9MnTZc4GX1TLcbA

Score
10/10
9ea41fac0af12ade12ae478b6c25112bvidar

Malware Config

Extracted

Family

vidar

Version

6.3

Botnet

9ea41fac0af12ade12ae478b6c25112b

C2

https://steamcommunity.com/profiles/76561199566884947

https://t.me/octobrains
Attributes
  • profile_id_v2

    9ea41fac0af12ade12ae478b6c25112b

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.16; rv:110.0) Gecko/20100101 Firefox/119.0

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4528-2-0x0000000000400000-0x0000000000509000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections