General
-
Target
2720-16-0x0000000000400000-0x0000000000657000-memory.dmp
-
Size
2.3MB
-
MD5
9e5b0c8d63232fae48fbab8b4651d6f4
-
SHA1
eb1f8b4709ea35117c42bb14d3f05080d92bd803
-
SHA256
24936a1602dcbe1f6fe9902498c2b61c1a64dd66eecc73e151f796b17c7c776a
-
SHA512
ba9dfd607024180591070d2ccf5eefd3d8d3dd54e5aeab2c044a039c70914b936e4e9f92ba0244f3abbdd7cb531304b497074d4488a49faf4987deadc5647538
-
SSDEEP
3072:TR+9MwiQ1/d0kzv4NmVcc18DM74+c9JDpdN3f5Bl5xopA0Wq0jnp8HraGVmQdwu:TRKMreKkzwNemDM7Ab3kI8p7wu
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/edm0d
https://steamcommunity.com/profiles/76561199768374681
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2720-16-0x0000000000400000-0x0000000000657000-memory.dmp
Headers
Sections