General
-
Target
2724-9-0x0000000000400000-0x0000000000657000-memory.dmp
-
Size
2.3MB
-
MD5
1e7181c18ec1941f938e9b41b874b66e
-
SHA1
f679d879c77c28800e638cf8ed840bf5b5b532fb
-
SHA256
88539b827e2b945cefb592a44c4d152e5de1223a5e82df9b6724356f76aab668
-
SHA512
4d4ca87505bcb5c7fa61367a7b3c7790bea18c25155f2ac0ae6f1b97644a691d22bfddf59bca3b0340023be7c33dfb18a8b30b23a7607c091158b6e11240b529
-
SSDEEP
3072:gR+9MwiQ1/d0kzv4NmVcc18DM74+c9JDpdN3f5Bl5xoaq0j8p8HraqVmQdwu:gRKMreKkzwNemDM7Ab3iB8F7wu
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/edm0d
https://steamcommunity.com/profiles/76561199768374681
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2724-9-0x0000000000400000-0x0000000000657000-memory.dmp
Headers
Sections