General
-
Target
3340-3-0x0000000000400000-0x0000000000657000-memory.dmp
-
Size
2.3MB
-
MD5
7c3138918db810cede4e6be42b52aa39
-
SHA1
c84e70e6515cd94da3dd694bafa0f7ad69450b83
-
SHA256
1b783266e12b0568f88b05e4e08f79bce5dd2ec3b4b9b28c2702bc5fef3fa427
-
SHA512
480dd8000958f9f226cbd3ddc2a8f2a1a6293198c2361d3ef1f22a0587d8bdf6024ea4f1d09e6faf61201ea2a8afe4347e79a22b72608d1d1e07ca7dead134f6
-
SSDEEP
3072:oPZwlX9MbkzV5GdSTnQB9IzAc1xwb2b+cWN+EyrYfrBhCemdq0vdp8Hrab4dAu3m:6wlNM47G+nQTszwb2OyYvp+8k+Au3l
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/fneogr
https://t.me/edm0d
https://steamcommunity.com/profiles/76561199768374681
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3340-3-0x0000000000400000-0x0000000000657000-memory.dmp
Headers
Sections