General
-
Target
2852-183-0x0000000003870000-0x0000000003AE6000-memory.dmp
-
Size
2.5MB
-
MD5
2263f4b513a2b91d9d40642b3e51a83b
-
SHA1
1f231f0a16c70ba442186c5aad5a87806b6c4127
-
SHA256
0820ebc80a9b0e17bc7be0cb7293bf5c9fe7dc8ec63abf5879bd59833f73007e
-
SHA512
c0d7f524743573accebfd515fe6a470406cc6eaed33d5acd5aa626b72c5bda603b741b3086d877de697c93e6663146744f1c14b115d86007201d156ba2a2cd40
-
SSDEEP
6144:8oRGyxkP9h164Fb9neo8Sk6A0ZH8FNBa311546VkpUFkhh02FHSKdFBXLGK4/qbv:LIPzsI9neTS40t8bS11rVzFnI5Ckiq
Score
10/10
Malware Config
Extracted
Family
vidar
Version
11
Botnet
dc012f980711fe846b1fec1f4b705f4a
C2
https://steamcommunity.com/profiles/76561199780418869
https://t.me/ae5ed
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2852-183-0x0000000003870000-0x0000000003AE6000-memory.dmp
Headers
Sections