General
-
Target
3356-4-0x0000000000400000-0x0000000000644000-memory.dmp
-
Size
2.3MB
-
MD5
60382f3ce7ece74315f7bd6eb9b2ba60
-
SHA1
29d4ba704977fb590b8bc6f8bc6a7b0fe11d639b
-
SHA256
a53cb7334b8bfbde1294eab21dd880979de67df6447d309ab6ae1922e6c6f488
-
SHA512
f5d98efb0f23c34ecad5fed312a03ac2009a4147e60fff3757b7a47ccc8efe432ed495acf91ce739ed0ab639d766cb189266671b7376b83151e6cd6023140fa9
-
SSDEEP
3072:4OhIx7MZiEtR3YDflmocZxr9wUdNn5Q6Saw:7Ix7Oiq9YDdzcvr6iv
Score
10/10
Malware Config
Extracted
Family
vidar
Version
8.6
Botnet
debff3f4f38e9beeaf8e215a762c8549
C2
https://steamcommunity.com/profiles/76561199658817715
https://t.me/sa9ok
Attributes
-
profile_id_v2
debff3f4f38e9beeaf8e215a762c8549
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3356-4-0x0000000000400000-0x0000000000644000-memory.dmp
Headers
Sections