vidar | 972-56-0x0000000000400000-0x0000000002BB0000-memory[.]dmp

General

Target

972-56-0x0000000000400000-0x0000000002BB0000-memory.dmp
Size

39.7MB
MD5

c88813218a9ab8cb0ccfa317bee143ee
SHA1

8039b81334a634e118d752e2250ddb1ac71f199f
SHA256

36ed858788db1f702ab5de2d8563490f5f99ff179d74a78b63cb5d1a80f2281a
SHA512

035947eb3e9940b64198c2fd0bd3174e21629586105763e9d72830b6570878b1909f5d7733d8694fbd3b17627bfeef4f5f3ff181de3cb79fc12fe37dd2596896
SSDEEP

12288:16HX5aG782ook65G/id5CV5ovZVjpD9p:16HJdVook6E/8koVtD9

Score

10^/10

Family

vidar

Version

3.5

Botnet

2234cb18bdcd93ea6f4e5f1473025a81

C2

https://steamcommunity.com/profiles/76561199497218285

https://t.me/tg_duckworld

Attributes

profile_id_v2
2234cb18bdcd93ea6f4e5f1473025a81
user_agent
Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36 Vivaldi/3.7

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
972-56-0x0000000000400000-0x0000000002BB0000-memory.dmp