General

  • Target

    2804-574-0x0000000005C10000-0x0000000005E59000-memory.dmp

  • Size

    2.3MB

  • MD5

    d901b4050c6fc6f8c468fa8df4b0d9cf

  • SHA1

    2f9ff9851ac21c5af417d89701d0aedd9ab219c4

  • SHA256

    394cdbf89f02f5f2e9fed42f7cead0cb97b9c8d2a038a40de125befed20b893f

  • SHA512

    3e92a89b7b5d8375ecc35a63838bc6265fe418685682ee9731cb29a76f36123940e498fdbb95cdc0ac9e41ad158893ae67eb79df374ead008727b7dea53e133f

  • SSDEEP

    3072:V9tdngPNZFSDfevwsh9JML9cNaKrg0Jt+frhw:Vjdn9ulhTWKN1I

Score
10/10

Malware Config

Signatures

  • Detect Vidar Stealer 1 IoCs
  • Stealc family
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2804-574-0x0000000005C10000-0x0000000005E59000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections