General
-
Target
3492-68-0x0000000000400000-0x0000000000648000-memory.dmp
-
Size
2.3MB
-
MD5
f3d23bc249bbb56f59974eeb6538fea1
-
SHA1
82f1be3560017ce6a83ad5dc3d85e286987c0e4e
-
SHA256
300a8205ab3014131a548e3d6460f931d46e8674d0c726f942f716844993c523
-
SHA512
a68f79f626aee4f3b2d4bf7fe2341d55e484acccf843cd6f757419491b61a11dec4df79241598b8b68d56b84f19d9b25b09924d07b4b0e0f24e8d5d9d2129100
-
SSDEEP
3072:BTQm3axZbvWtCyEwVt2IUE5iujhGzCLEo6DreNsagz6p9ufGol:SmqHbv+EwiIf5ykEo8lMufG
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/bu77un
https://steamcommunity.com/profiles/76561199730044335
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.1) Gecko/20100101 Firefox/128.1
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Stealc family
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3492-68-0x0000000000400000-0x0000000000648000-memory.dmp
Headers
Sections