Overview

overview

10

Static

static

10

1176-146-0...ry.exe

windows7-x64

1

1176-146-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1176-146-0x0000000000400000-0x00000000004DE000-memory.dmp

  • Size

    888KB

  • MD5

    cb71ee11a2e1a879da0444f790cdfdd3

  • SHA1

    3c68ab639f308564aca460329d3513d217183c05

  • SHA256

    f0e8b4cdd2e736255c5de65faace2362daded385bb01012def3ac2add9149ca1

  • SHA512

    10cfcc4e4c6c9ac9e02c3b9daf62f088ecd83a4df73cda8c2222085b36c647f88625667e9b1a8ca7f336fb20b96d23561aac23e27da372d1e2ff0cfc38c2b7c0

  • SSDEEP

    6144:skeehzAsTLPXhmXtI88Ndrb8R2edHdeNonXYe6gjuhHRD:skeehT7hpzg4C9eNonjjC

Score
10/10
371995683280220a00f84dafb17a9c7cvidar

Malware Config

Extracted

Family

vidar

Version

4.4

Botnet

371995683280220a00f84dafb17a9c7c

C2

https://steamcommunity.com/profiles/76561199235044780

https://t.me/headlist
Attributes
  • profile_id_v2

    371995683280220a00f84dafb17a9c7c

  • user_agent

    Mozilla/5.0 (Linux; Android 7.0; Pixel C Build/NRD91D; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/53.0.2785.124 Safari/537.36

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1176-146-0x0000000000400000-0x00000000004DE000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections