General
-
Target
1144-79-0x0000000000400000-0x0000000000643000-memory.dmp
-
Size
2.3MB
-
MD5
fc79e4d1947c75a821c7785a9f0577aa
-
SHA1
941d685aed41234b8f90016a4259f244a58f442b
-
SHA256
76a10fedbc663e3933e4b5f994b2b8a0ff43f40ee2f19a4de11a3ba05b7ac704
-
SHA512
617eea2a61d34bc92da24094e08acdecb3a8ae081f7f91639483cee0ef294a615b08d673852263caa219fcd941ed25b34fa3c4d05e0bc14d2ed81619cfd297d7
-
SSDEEP
6144:nbShBLWANKrBWyt3ZOwUPfbldFw0t+Z0vhAVfNiCsy5EIlHuiB:nboLWxrBD1dsMHHu
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://steamcommunity.com/profiles/76561199747278259
https://t.me/armad2a
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1144-79-0x0000000000400000-0x0000000000643000-memory.dmp
Headers
Sections