General

  • Target

    1368-0-0x00000000010A0000-0x00000000010F3000-memory.dmp

  • Size

    332KB

  • MD5

    0cfc257437f545e258cb003aefce9a82

  • SHA1

    635acded8dd68294fc755bc1d215b0a6fc7b3ce1

  • SHA256

    f003d51c9ca347a4ac011ceb12833868f6c68addffc66256b6ba420caee29e11

  • SHA512

    7d71daedd790e5a788d71388dbe1877001dab35c3692a14f49fa19f0d0f65c3a054b7e9fd4d2f13ba3eddf59fa780e72508e5f7e69b5a84212bb1ff94b4b95be

  • SSDEEP

    6144:60B6ImuR+EXJhVNaEgFn5l7usZ5LF4UUJ2Tp3:60B6c+E5hVNaFFnj7F94UUAp3

Score
10/10

Malware Config

Signatures

  • Detect Vidar Stealer 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1368-0-0x00000000010A0000-0x00000000010F3000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections