vidar | 2112-3-0x0000000000400000-0x0000000001F10000-memory[.]dmp

General

Target

2112-3-0x0000000000400000-0x0000000001F10000-memory.dmp
Size

27.1MB
MD5

416a3a4b6f69bca24837b3361308edf6
SHA1

3850b98718b6c6fa8f2ef4ef8d0858fafb8baa85
SHA256

e5f3b96a32fdbe996d0d8ebb8eeb36cb788272ff2f05936380314113be707684
SHA512

17adbdcaaed7fa1ca211c83d5b15eca4eb9f332a50f5342ddbb7bde0be3253c4c92e29988513e349e0e117fe9d09c37d4ff9eadf56896b3fbcfe942c0eba84e9
SSDEEP

3072:c7AkGT31oD0yJWwIBuqzIOS8EKtck4I/jnItxoLG+1vDMc4wV8ERlJ7K34MbTjsq:c0kKo4yxIoqUOnUk4GItuD2M6ooXsq

Score

10^/10

stealer vidar

Detect Vidar Stealer 1 IoCs
stealer

Processes:

resource yara_rule

sample family_vidar_v7
Vidar family
vidar

resource	yara_rule
sample	family_vidar_v7

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2112-3-0x0000000000400000-0x0000000001F10000-memory.dmp