General
-
Target
808-3-0x0000000000400000-0x0000000000AFB000-memory.dmp
-
Size
7.0MB
-
MD5
816f355e97aa16177edf613bac1ed640
-
SHA1
b937bf38ce1ac279ec011e04ba30089f1b07b308
-
SHA256
583811c373b81bfb7cbfec4e4c7817f3de5f92298d8b4ab8194242c33c4f653b
-
SHA512
f8b0171981e056f414d0e39858de7363893f971214883420b4e2a1eb9a36d929a5da55bba41a7435c6e64f2655225bbf34941ee554507d5c9081cb2c9062ed62
-
SSDEEP
3072:gOhIx7MZiEtR3YDflmocZxruwUdNe5Q6nwawMqCcFHR:jIx7Oiq9YDdzcvrriGvcF
Score
10/10
Malware Config
Extracted
Family
vidar
Version
8.6
Botnet
22d12fb91f01647fe2107fec81f0cc22
C2
https://steamcommunity.com/profiles/76561199658817715
https://t.me/sa9ok
Attributes
-
profile_id_v2
22d12fb91f01647fe2107fec81f0cc22
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
808-3-0x0000000000400000-0x0000000000AFB000-memory.dmp
Headers
Sections