General
-
Target
2748-9-0x0000000000400000-0x0000000000649000-memory.dmp
-
Size
2.3MB
-
MD5
c56a03b5d8cdd7cb6cec9f14b9762d45
-
SHA1
677a610639310b541e897b11fdffbfe1fb370207
-
SHA256
4cd37392824d2f9c2d7e2199a2932d9e558ff9236b8c32084bd72fb106ded130
-
SHA512
cf28d406c2ff1fcfb395836f96c6328b72b82b34bff42fccfca964bd5a66a19c6fb5f2f2e7b8e4c9125be0af49f2b79e4aa1d390ec8e84c5aefb39818e441906
-
SSDEEP
3072:39tdngPNZFSDfevwsh9JML9cNaK/g0Jt+frhwx0pX1Ftp:3jdn9ulhTWKNRIUKlFT
Score
10/10
Malware Config
Extracted
Family
stealc
rc4.plain
Extracted
Family
vidar
C2
https://t.me/ta904ek
https://steamcommunity.com/profiles/76561199695752269
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Stealc family
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2748-9-0x0000000000400000-0x0000000000649000-memory.dmp
Headers
Sections