General
-
Target
2304-2-0x0000000000400000-0x0000000000644000-memory.dmp
-
Size
2.3MB
-
MD5
4f523b1522ac355808d2806d9b1b02b4
-
SHA1
35b8a975c497ec1b9f5da19a901a8163ca2b99d4
-
SHA256
5cd3abcafe192fd32e0a165a0d56275dd9a88b4fdbe9e5f8d3cf34cdd06becfa
-
SHA512
8f174574bd3009bd3cc13a7a35f6596998e27d0a4621cd1cbcc3b159dc5aae3460030f0b440c76fb2cfefc9089ac422415dc8898d627551ecc09e9d2ba78886d
-
SSDEEP
3072:99N4JQisflFNJEL7PdVNVcNa1tFDO1RxHT4xzT8HgmnR:99BJd/qLTdVNGekTVTcBmnR
Score
10/10
Malware Config
Extracted
Family
vidar
Version
8.1
Botnet
1ea8aee42f0abfcd960a0b72af3ab3d7
C2
https://steamcommunity.com/profiles/76561199649267298
https://t.me/uprizin
Attributes
-
profile_id_v2
1ea8aee42f0abfcd960a0b72af3ab3d7
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 OPR/96.0.0.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2304-2-0x0000000000400000-0x0000000000644000-memory.dmp
Headers
Sections