General
-
Target
2476-3-0x0000000000400000-0x0000000000AFC000-memory.dmp
-
Size
7.0MB
-
MD5
65dd057e05df81c53ac84a29b28672f7
-
SHA1
82cffcf9bbe8bb879e6cfef9190fd2ee862cc4ff
-
SHA256
fffd7ee40aeef43b8ebc981dd1603afc8b4fa5ed4b7c8284ba7286ef19fff456
-
SHA512
1031082b0e6e615a074cb3ed2fbd0b5d107d3e982e8b64186b48b12f5721408d06d0d2379a965d220065e602faa88640e9eb389b19a5e361d7aaeeb5dbfe84c3
-
SSDEEP
3072:gOhIx7MZiEtR3YDflmocZxrbwUdNe5Q62awXApTxe+FHF:jIx7Oiq9YDdzcvrEiGhT0+F
Score
10/10
Malware Config
Extracted
Family
vidar
Version
8.6
Botnet
22d12fb91f01647fe2107fec81f0cc22
C2
https://steamcommunity.com/profiles/76561199658817715
https://t.me/sa9ok
Attributes
-
profile_id_v2
22d12fb91f01647fe2107fec81f0cc22
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2476-3-0x0000000000400000-0x0000000000AFC000-memory.dmp
Headers
Sections