General
-
Target
2268-3-0x0000000000400000-0x0000000000AFC000-memory.dmp
-
Size
7.0MB
-
MD5
d0916611b33e20889a02468b8b3a691f
-
SHA1
d28d97ff548b1de1fb01357701b0c1a8e7390629
-
SHA256
750d45f643a4d4b2373433f21658f240ee7f0f8f7cef7912a4e4b1ceeb74eb41
-
SHA512
cd39edb7229e413da78e2113393dea30b4c178a2529f991d567e7aaf65376e763591709c2bf2328b63010d83fc0c74f0d6c840fe51b9452585ca957a8eb6dd60
-
SSDEEP
3072:gOhIx7MZiEtR3YDflmocZxrgwUdNe5Q6kawkpTRZfFHg:jIx7Oiq9YDdzcvr5iGTTRZfF
Score
10/10
Malware Config
Extracted
Family
vidar
Version
8.6
Botnet
22d12fb91f01647fe2107fec81f0cc22
C2
https://steamcommunity.com/profiles/76561199658817715
https://t.me/sa9ok
Attributes
-
profile_id_v2
22d12fb91f01647fe2107fec81f0cc22
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2268-3-0x0000000000400000-0x0000000000AFC000-memory.dmp
Headers
Sections