General
-
Target
3036-8-0x0000000000400000-0x0000000000657000-memory.dmp
-
Size
2.3MB
-
MD5
9000d7211c6404e946143e5d7f967d09
-
SHA1
93675814be3e529f3299b9f549589dca2b84103b
-
SHA256
42d147f26cf9b62e7d7bcb66de3745081494463adb3aa2ecafad6fe0553414a8
-
SHA512
1001764ec6432f357317152cc9394bd5cd0d8a03eb5d8e870e112451aaba549cca0dc7694d62c868c3dc44505884854e5eb3c736057daf4b242144a63563c3d8
-
SSDEEP
3072:QPZwlX9MbkzV5GdSTnQB9IzAc1xwb2b+cWN+EyrYfrBhCemdq0vpp8Hrab4dAu:CwlNM47G+nQTszwb2OyYvpq8E+Au
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/fneogr
https://t.me/edm0d
https://steamcommunity.com/profiles/76561199768374681
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3036-8-0x0000000000400000-0x0000000000657000-memory.dmp
Headers
Sections