Overview

overview

10

Static

static

10

2424-129-0...ry.exe

windows7-x64

1

2424-129-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2424-129-0x0000000000400000-0x00000000004B3000-memory.dmp

  • Size

    716KB

  • MD5

    5a8af765ab29ae0fa69bcdfea3199f68

  • SHA1

    76fa362bddf57e7d41341f2cb3788bed6dfad40c

  • SHA256

    4f72f1a649025e5253755293aff6a174ea3744743e3c0c19dc568d1b9a6ce5d4

  • SHA512

    e1c910e15335bdc714861c97dcb17a17528fca578db666352b8575da8203aa0e825dccebda0e10bac85e86c791661d3806f867ac0d14a0c21d347007ae89cd84

  • SSDEEP

    12288:mib4E1z9tDqi/sV3mHzeZSckfG7SnbH5St:mc1z9hqiC2IScRWb8t

Score
10/10
c84db62b932dcb762087d2abfdc02d9bvidar

Malware Config

Extracted

Family

vidar

Version

4.6

Botnet

c84db62b932dcb762087d2abfdc02d9b

C2

https://steamcommunity.com/profiles/76561199523054520

https://t.me/game4serv
Attributes
  • profile_id_v2

    c84db62b932dcb762087d2abfdc02d9b

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2424-129-0x0000000000400000-0x00000000004B3000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections