Overview

overview

10

Static

static

10

2684-353-0...ry.exe

windows7-x64

1

2684-353-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2684-353-0x0000000000400000-0x000000000046B000-memory.dmp

  • Size

    428KB

  • MD5

    bd96c0c624400de1e11dff33d3c103cf

  • SHA1

    5090ba39e5d1da66a2e317c96ac7b2cd7bb95a11

  • SHA256

    9d58780991dacf9e0b4fd21f1e886186470cc6574e89f98de81ada76d0722d3a

  • SHA512

    4af93df107b4269d7f2c403afef4f8782de45697be5b45812863d6bd2f37db6989c6f118288ad18b0b0c53049bacbcae214ad24703060fd3c5547fb81783d59d

  • SSDEEP

    6144:4keehzAsTLPXhmXtI88Ndrb8R2edHdeNonXYa6gsuh3Z:4keehT7hpzg4C9eNonns

Score
10/10
153ce668f1e21829c936c2b11fa4d869vidar

Malware Config

Extracted

Family

vidar

Version

4.4

Botnet

153ce668f1e21829c936c2b11fa4d869

C2

https://steamcommunity.com/profiles/76561199235044780

https://t.me/headlist
Attributes
  • profile_id_v2

    153ce668f1e21829c936c2b11fa4d869

  • user_agent

    Mozilla/5.0 (Linux; Android 7.0; Pixel C Build/NRD91D; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/53.0.2785.124 Safari/537.36

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2684-353-0x0000000000400000-0x000000000046B000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections