General
-
Target
2820-12-0x0000000000400000-0x0000000000676000-memory.dmp
-
Size
2.5MB
-
MD5
664dc9f890ca71ec4461e280100db049
-
SHA1
d90edffdc0a528746d5268c8985b537be4eafd1d
-
SHA256
cfdd3649ea2e7052892018d127f09dfd6e7c9a7934652842dc609ab2f24c5e54
-
SHA512
77dc883077523a36f53692b8417e6346fe1607066969832ddbc3421f31b38b3d974ff3ad4622e228c3e5f67093f1b022876b76b4b7f5ff702eb787b5f552f39c
-
SSDEEP
6144:nlqPvKpKJNJGyRly38aSp0ZH8FNBa31154:nmRJNMalysaO0t8bS11
Score
10/10
Malware Config
Extracted
Family
vidar
Version
11
Botnet
6c8ce6f422a1d9cf34f23d1c2168e754
C2
https://steamcommunity.com/profiles/76561199780418869
https://t.me/ae5ed
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2820-12-0x0000000000400000-0x0000000000676000-memory.dmp
Headers
Sections