General
-
Target
1352-6-0x0000000000400000-0x0000000000657000-memory.dmp
-
Size
2.3MB
-
MD5
cfd0dea114f628ac7a974d0d22b6dc8c
-
SHA1
769c66ed351d328407a8be59f9469b4cad1280b4
-
SHA256
f3f1313f3c51e73d9fb9b050571c2e9cb7fa4b291433e7e08ff19e63d39e0515
-
SHA512
74b69b3d248d44ccd9e9e5fcd4e448323c5852494a293f9953ec5885c6d3e008f47e9387afacdf77ea88e1c75105745d21d340bbaa8e6ebddb538c0f9cf29313
-
SSDEEP
3072:TR+9MwiQ1/d0kzv4NmVcc18DM74+c9JDpdN3f5Bl5xoaq0jnp8HraGVmQ:TRKMreKkzwNemDM7Ab3iI8p
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/edm0d
https://steamcommunity.com/profiles/76561199768374681
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1352-6-0x0000000000400000-0x0000000000657000-memory.dmp
Headers
Sections