General
-
Target
1520-56-0x0000000000400000-0x0000000002BB0000-memory.dmp
-
Size
39.7MB
-
MD5
38acdebb5a9a132741238800b7f9d217
-
SHA1
da2af9f15c83721069c3ab3de1302588c3335bfa
-
SHA256
96a5ae0f664c74b850f43914d72fc8bc4318eec29df8e52c2621ff12772c902c
-
SHA512
b1fac3840f00d47d7284fbe0568b2f70182a0852c38a96cd74afd9ae00c6a163c2300e2c04671890b4a57b3888c35643ff4636397709adfe95cd4543efc9d624
-
SSDEEP
6144:166+X5aG78XAIn2RN2iy3g8UpioUb65qJfbri5bMuCV4aoSqdBFJVjShVHrD:16HX5aG782ook65G/id5CV5ovZVjcD
Malware Config
Extracted
vidar
3.5
2234cb18bdcd93ea6f4e5f1473025a81
https://steamcommunity.com/profiles/76561199497218285
https://t.me/tg_duckworld
-
profile_id_v2
2234cb18bdcd93ea6f4e5f1473025a81
-
user_agent
Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36 Vivaldi/3.7
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1520-56-0x0000000000400000-0x0000000002BB0000-memory.dmp
Headers
Sections