Overview

overview

10

Static

static

10

208-770-0x...ry.exe

windows7-x64

1

208-770-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    208-770-0x0000000000400000-0x00000000006EA000-memory.dmp

  • Size

    2.9MB

  • MD5

    6de000088153212ea733b9ef66eb39c8

  • SHA1

    b08c7cfc6e3e5a92155a8c650635ff930903db94

  • SHA256

    6fcf06b9882f139b0264b4c2b8b9497e07db13f4e4b247d51c9b95f487610d6f

  • SHA512

    a3944ec7a208e579458cb5f482fee23db44fd9347ac99138058e72eade1a180a4082ec80b74020a5a6c245c9141849be21472bdfe8f06d01d56a079f5309669b

  • SSDEEP

    6144:7ua5z4XeLqMVc2Uc1ax/QfTyuAlHKdlJt0KQah6wu2Ain1vFA:7V5z4XPMPA/QryvodlJt0KQT6FA

Score
10/10
e5d7cb6205191dc1a4f6288000860943vidar

Malware Config

Extracted

Family

vidar

Version

3.8

Botnet

e5d7cb6205191dc1a4f6288000860943

C2

https://steamcommunity.com/profiles/76561198272578552

https://t.me/libpcre
Attributes
  • profile_id_v2

    e5d7cb6205191dc1a4f6288000860943

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36 Vivaldi/3.7

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 208-770-0x0000000000400000-0x00000000006EA000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections