General
-
Target
2640-71-0x0000000000400000-0x0000000000648000-memory.dmp
-
Size
2.3MB
-
MD5
b52685ff99a57af9bf1696ea7e4348ea
-
SHA1
338b135f24183aed0bfe9b83c4674d1f3bfe0e5c
-
SHA256
951243592d30c77fc30700754b561a01bcc5a7ff112bb5f38d5f112938fc01c3
-
SHA512
8a89ab8146d33cb1d3923b48fa8a452d8695225eba930288c27ae50584205783939c290bcf9719cc162b5cc733b219ffc5152d332731c6fa1b20d80fba58e8b7
-
SSDEEP
3072:fqaddXw+Se8qGLLFiYP0ZLB826Fpw1YTxfEUzvFgWy:SadRw+SxiYPyBKY1YTJ1O
Score
10/10
Malware Config
Extracted
Family
stealc
rc4.plain
Extracted
Family
vidar
C2
https://t.me/r8z0l
https://steamcommunity.com/profiles/76561199698764354
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Stealc family
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2640-71-0x0000000000400000-0x0000000000648000-memory.dmp
Headers
Sections