General
-
Target
3036-4-0x0000000000400000-0x0000000000648000-memory.dmp
-
Size
2.3MB
-
MD5
50445f9e52db88209b89a728c912a794
-
SHA1
111c19b0ea514e9f5629bf57aaef33855458b042
-
SHA256
d330dd5f4427f07b75a42b5e2507ffebe6c15ae9e9b7f5217c4abf506a4b1622
-
SHA512
92136575ae376a0ac7a44b3443e9a00829f86ee2754d60f91d82967f2bb70a220c7c2e94bd5c57c9d1d872adef81f0e9ea60a7f46b961d07b055f2689065df0d
-
SSDEEP
3072:pvPo4swzELzFdy6CtNdy8sBGvR6R1Q6Brzu5kgBc9wUdCMoJBcrGrt2:V/gfFA62d6E56REmgBbm6erGx2
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://steamcommunity.com/profiles/76561199658817715
https://t.me/sa9ok
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3036-4-0x0000000000400000-0x0000000000648000-memory.dmp
Headers
Sections