General
-
Target
2036-0-0x0000000000310000-0x00000000008D6000-memory.dmp
-
Size
5.8MB
-
MD5
4a1748325d613a275c533fdaecb99ca4
-
SHA1
4218cd5a74af1c4e8cd814a337248b015714187e
-
SHA256
701340ea8bad2715cc387f8b5e8cb3ebc20f5dcbba47d64027000d899d067a1e
-
SHA512
2e7b5766cd98579280e2d2c0857df2320b0df235545622fae7111273f79ffdcc24b76f73a1911190d1949ce869a251e6d5d163719ce2b6c7a20984dd9f923f9b
-
SSDEEP
98304:xnp+qfK3etq+37albNMub3fcRdmzWnELvMcEym0kZ:xo6qyW/MHTmMELvlED
Score
10/10
Malware Config
Extracted
Family
stealc
rc4.plain
Extracted
Family
vidar
Version
9.6
Botnet
b5b0ed280791ce9084c17ea89923d33a
C2
https://steamcommunity.com/profiles/76561199681720597
https://t.me/talmatin
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 OPR/101.0.0.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Stealc family
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2036-0-0x0000000000310000-0x00000000008D6000-memory.dmp
Headers
Sections