General
-
Target
2884-3-0x0000000000400000-0x0000000000AFC000-memory.dmp
-
Size
7.0MB
-
MD5
562733317dd28dfbb1591d24091bb5ae
-
SHA1
3996b8160fd544c7d97ec8ab722f831a848462d2
-
SHA256
ad75b41f3cb3ed84d1f090c3f217db1e0ea1718e44c3fdb1fc411c83381cae40
-
SHA512
92fc448e022189784b18bfe8f3c33b116f661b99b134feb18bfed693a3d81ffc64e56ca9518e0217738176eae70f23a1b81a6219a8e86478306082a196c1e074
-
SSDEEP
3072:gOhIx7MZiEtR3YDflmocZxrzwUdNe5Q6sawGApTxe+FHF:jIx7Oiq9YDdzcvrMiG8T0+F
Score
10/10
Malware Config
Extracted
Family
vidar
Version
8.6
Botnet
22d12fb91f01647fe2107fec81f0cc22
C2
https://steamcommunity.com/profiles/76561199658817715
https://t.me/sa9ok
Attributes
-
profile_id_v2
22d12fb91f01647fe2107fec81f0cc22
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2884-3-0x0000000000400000-0x0000000000AFC000-memory.dmp
Headers
Sections