Overview

overview

10

Static

static

10

1780-56-0x...ry.exe

windows7-x64

3

1780-56-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1780-56-0x0000000000400000-0x0000000002BB0000-memory.dmp

  • Size

    39.7MB

  • MD5

    f8056209542291745546f8d51e05a5ec

  • SHA1

    9825173e8392ed6d4b9ac7a560711d1f1de00414

  • SHA256

    9dae1810269911b94cfc5f97104e63f8defa18b82089cf648c2354b557b1a0b4

  • SHA512

    3a94e8b574a039963cdffaeac74e22e9b955714e3cbc1072e0c3a18b9ba1b117d2ed6da3d214421b4e2c6ba1a95ccd4a8f996db12857db6388bf4bf42fed1503

  • SSDEEP

    6144:166+X5aG78XAIn2RN2iy3g8UpioUb65qJfbri5bMuCV4a+SqdBFJVjShVHLp1:16HX5aG782ook65G/id5CV5+vZVjGp

Score
10/10
2234cb18bdcd93ea6f4e5f1473025a81vidar

Malware Config

Extracted

Family

vidar

Version

3.5

Botnet

2234cb18bdcd93ea6f4e5f1473025a81

C2

https://steamcommunity.com/profiles/76561199497218285

https://t.me/tg_duckworld
Attributes
  • profile_id_v2

    2234cb18bdcd93ea6f4e5f1473025a81

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36 Vivaldi/3.7

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1780-56-0x0000000000400000-0x0000000002BB0000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections