General
-
Target
2120-3-0x0000000000400000-0x0000000000644000-memory.dmp
-
Size
2.3MB
-
MD5
8226f67784f5540b54c005891d7ec8da
-
SHA1
9bc6631e257b39fe0d1694fabfeaf2d29453ee16
-
SHA256
5c373b77338b959a5b602b77ce0e00766cb48a418644239a7ad0821ff423e719
-
SHA512
b83a293fc46d7fdb6f21dc276d59992489b838ccaf1c6e438f9bea954da146c174e44bdb38a65a5029d916b170c79033043189081f64f654a12bebfef1740a0c
-
SSDEEP
3072:gOhIx7MZiEtR3YDflmocZxrdwUdNe5Q6UIyaw:jIx7Oiq9YDdzcvraiGU
Score
10/10
Malware Config
Extracted
Family
vidar
Version
8.6
Botnet
22d12fb91f01647fe2107fec81f0cc22
C2
https://steamcommunity.com/profiles/76561199658817715
https://t.me/sa9ok
Attributes
-
profile_id_v2
22d12fb91f01647fe2107fec81f0cc22
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2120-3-0x0000000000400000-0x0000000000644000-memory.dmp
Headers
Sections