General
-
Target
2856-12-0x0000000000550000-0x0000000000794000-memory.dmp
-
Size
2.3MB
-
MD5
6a01ea8de7c0c29a5b698e092c25c707
-
SHA1
08b0ff7b15aff6328450bd377a7ac7dd63511462
-
SHA256
406329ce510585c0ce7460a95b4b1def3baf9ade165c886185988422da769d8a
-
SHA512
7217358dc86ddd4556d571b7d7f2a7372d35a966c9f8bd76e6f14781a5f6f75a918149f08fad556812ff6b9372ea679b8fb761e5f2a72c293573c35e56b752f7
-
SSDEEP
3072:i4GxNJfrXkcxeaA0qFAj0qSlXenXgoLGFsYekJS3W/2:4xNJX0P0qWj05NennrpG/2
Score
10/10
Malware Config
Extracted
Family
vidar
Version
8.2
Botnet
2043e34666b3d43ba9df00df74dcdc2c
C2
https://steamcommunity.com/profiles/76561199651834633
https://t.me/raf6ik
Attributes
-
profile_id_v2
2043e34666b3d43ba9df00df74dcdc2c
-
user_agent
Mozilla/5.0 (Windows NT 10.0; rv:109.0) Gecko/20100101 Firefox/115.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2856-12-0x0000000000550000-0x0000000000794000-memory.dmp
Headers
Sections