General
-
Target
2528-9-0x0000000000400000-0x0000000000657000-memory.dmp
-
Size
2.3MB
-
MD5
9d415b38c83a01f2faa01de10c12978c
-
SHA1
3100b46d359037aed83001fd58639fde367755a2
-
SHA256
c123492e51e5c9907781d28f805ac5d3565ef0cfa82e54b408a4516f9ca4873d
-
SHA512
70e94d1d7c707b465c5ec6e4367a76ac66f4d27d900348ca149197b6f926b2eef29a61625e3c7a24a9e3735e325907261282a850aa2384e9e3ee0a7b198a236a
-
SSDEEP
3072:xR+9MwiQ1/d0kzv4NmVcc18DM74+c9JDpdN3f5Bl5xoaq0jcp8HraqVmQdwu:xRKMreKkzwNemDM7Ab3ix8F7wu
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/edm0d
https://steamcommunity.com/profiles/76561199768374681
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2528-9-0x0000000000400000-0x0000000000657000-memory.dmp
Headers
Sections