General
-
Target
576-8-0x0000000000400000-0x0000000000676000-memory.dmp
-
Size
2.5MB
-
MD5
92b61f32f945799434c7346b3ddf56ee
-
SHA1
3a08127d442ad83a62677174cf5b6d374b8fc772
-
SHA256
1e429f809c9f7a7f9783a5fc1f3faf2d5e2d4c1ba44722afccdfddf44b84c608
-
SHA512
151ffa3e85c714193cc1430af3802a9eaf2365a77be93229e9662eb91918359d966af25b36de3923b5e8ecfc05129c17789b86b1d58fdcf0453059f80989cd26
-
SSDEEP
3072:DLmyx1Bddbh/zP+2kMvm5KGcwGT0ttaQGjzPc48Eq0isp8HraYt:DKynBLh/DXvm55d768P
Score
10/10
Malware Config
Extracted
Family
vidar
Version
11
Botnet
9bf5e431869643a2ac397d2dc0d687fb
C2
https://steamcommunity.com/profiles/76561199780418869
https://t.me/ae5ed
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
576-8-0x0000000000400000-0x0000000000676000-memory.dmp
Headers
Sections