General
-
Target
280-14-0x0000000000550000-0x0000000000794000-memory.dmp
-
Size
2.3MB
-
MD5
21d2270cf14faf821a86c2a163784680
-
SHA1
8b061c5078a58dfaa5173e037a1a9e508c428403
-
SHA256
8278143eb92ced97657fc48d3f27f20c509a7ab71d65a7cf074fb6d6fc9d3e93
-
SHA512
30c349cb382feef6853caf8be641fc52ad058adb3a5e04ece7cc6c7029725fd4521635ff0c48653f19b35b53246bd57b31ed40e4f655633e821f08dc7426d3a1
-
SSDEEP
3072:lsWklEXTDg20PL86VH2SUMTy7g1Zj2oqHb93SBCN3jwgXQ375ki:l7kuvDWLNHamy7y07BSBC0IQr5ki
Score
10/10
Malware Config
Extracted
Family
vidar
Version
8.2
Botnet
a933350d1a85cf3797edd973ca74c44c
C2
https://steamcommunity.com/profiles/76561199651834633
https://t.me/raf6ik
Attributes
-
profile_id_v2
a933350d1a85cf3797edd973ca74c44c
-
user_agent
Mozilla/5.0 (Windows NT 10.0; rv:109.0) Gecko/20100101 Firefox/115.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
280-14-0x0000000000550000-0x0000000000794000-memory.dmp
Headers
Sections