Overview

overview

10

Static

static

10

872-809-0x...ry.exe

windows7-x64

3

872-809-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    872-809-0x0000000000400000-0x00000000007E4000-memory.dmp

  • Size

    3.9MB

  • MD5

    a6a8109844be8fd35eaecc944de25b8d

  • SHA1

    3443fa8a6b16c81f42e5956baca1ac050c9f7045

  • SHA256

    ff0976c25d9a24871734a1317beb18e3c3dbd88e7061a04e82747c829db57b29

  • SHA512

    f460d8f40f22336a5177ab0003db9197d66ac8e185cac3a90f034b3a6a5476e1761971e2b2f176e3d9142b27f1cc0ccb04faaa1d5d8c11f23477fffc99e0cdc1

  • SSDEEP

    6144:qZ4ZJ7oMzXpdF2AX2RvzI4TJu1lnTZc4Gl1HOh2PIxbnOzq:qa8wpCRv9MnTZc4Gl1HLCbO

Score
10/10
8036442451e00fa27a235c4a80cbfb3cvidar

Malware Config

Extracted

Family

vidar

Version

6.3

Botnet

8036442451e00fa27a235c4a80cbfb3c

C2

https://steamcommunity.com/profiles/76561199566884947

https://t.me/octobrains
Attributes
  • profile_id_v2

    8036442451e00fa27a235c4a80cbfb3c

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.16; rv:110.0) Gecko/20100101 Firefox/119.0

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 872-809-0x0000000000400000-0x00000000007E4000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections