General
-
Target
676-112-0x0000000000400000-0x0000000000644000-memory.dmp
-
Size
2.3MB
-
MD5
8b190512a582e1ab738cf2e6d24f7e02
-
SHA1
2c9f876290f3d3d210b8e123885fbe24ef365f89
-
SHA256
6d7d45518b857de826d8082337e83fea183a2bbb78c60f728bd589757be738a6
-
SHA512
c1e9b7614eb4e15479bb14b74d92f745c10d3cd0c6befc05119596918f8363a7159689989fced37a59f043e15232f16d089262965d11741d3c31190912f8fa24
-
SSDEEP
3072:hvzA6O0w5tsUTQsVgOc8yvY9emTKWBoynYenXY2oLG3QXwwTWtlg5:hs50Itjks6Oc8ygNKDyYebOrCtlg5
Score
10/10
Malware Config
Extracted
Family
vidar
Version
7.8
Botnet
13bd7290c1961db27b4ede41bfbf4c5e
C2
https://t.me/karl3on
https://steamcommunity.com/profiles/76561199637071579
Attributes
-
profile_id_v2
13bd7290c1961db27b4ede41bfbf4c5e
-
user_agent
Mozilla/5.0 (X11; Linux 3.5.4-1-ARCH i686; es) KHTML/4.9.1 (like Gecko) Konqueror/4.9
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
676-112-0x0000000000400000-0x0000000000644000-memory.dmp
Headers
Sections