General

  • Target

    1768-702-0x0000000000400000-0x0000000002D17000-memory.dmp

  • Size

    41.1MB

  • MD5

    28a9df09058e0ab54084766b23965f18

  • SHA1

    68adb8500ea82b8bb36f11bbd2cc588ebc82e00e

  • SHA256

    6bcda8a1f91bd81b5b4bfd001f2f0fc0ac8afd6a0481ca8266860d97487454fb

  • SHA512

    0084a71c96088627d3301db501a2d924020efd913c280642204fd6c4d3a9354866c915d501f58bcb2a5d5df042250070ee258cd83b91da6b714e4acc18765f36

  • SSDEEP

    24576:vPOHEi9bozJD9WvK3UdnUEvd+ctXNj7Mq:PcbozJD9jkdUWd+OfMq

Score
10/10

Malware Config

Extracted

Family

vidar

Version

40.1

Botnet

706

C2

https://eduarroma.tumblr.com/

Attributes
  • profile_id

    706

Signatures

  • Vidar Stealer 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1768-702-0x0000000000400000-0x0000000002D17000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections