General
-
Target
1828-415-0x0000000000400000-0x0000000000471000-memory.dmp
-
Size
452KB
-
MD5
c3418e902f613e96b36b51e416098e7e
-
SHA1
9a2d3defa3f89f307ee71b67bbd428732657503b
-
SHA256
5ce705449cbf84391a4b90d0dcd500d66b9b050171482f73f28f4916ad7c5d16
-
SHA512
3e73321d50a0063691841b86bf40fb42bf88270ba6d86201dcdcf57e3a12a5d660679313c07ed7f4050f2c0eaf4d29b51f111c29881b77642980603c1b593bb3
-
SSDEEP
6144:FjZi5dyACB0iCHcbk8ukYGFOg1i5+vEzhLJqNo:FjZgyAmk8uBGYg1i5+vEJJq
Score
10/10
Malware Config
Extracted
Family
vidar
Version
3.7
Botnet
31c7719b5ee962fbde376b75e771360d
C2
https://steamcommunity.com/profiles/76561199501059503
https://t.me/mastersbots
Attributes
-
profile_id_v2
31c7719b5ee962fbde376b75e771360d
-
user_agent
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1828-415-0x0000000000400000-0x0000000000471000-memory.dmp
Headers
Sections