General
-
Target
2404-9-0x0000000000400000-0x0000000000676000-memory.dmp
-
Size
2.5MB
-
MD5
2b5b47a9e626b9a425864cf5a9d59560
-
SHA1
d4b57771f27572d95b854ff0c60d85cbbde4c2c8
-
SHA256
3397dc0c6a0fd32ad3ce5797a1566a23402ff7bfba1c0da622ad45274fa3a34f
-
SHA512
97a6cbaf02605b0419c10247e9e687672b1e40d12b2e8546ed7af8e9e066461aeab3ca484765b5c63e8c38733222a2608e6c2cc51fc411fee4179109649e7127
-
SSDEEP
3072:fulT2PUeGyKpKJmdhzMJGydGcB00NVlbPaNEQyBq0oZp8Hra9s:WlqPvKpKJNJGyRlyH8a
Score
10/10
Malware Config
Extracted
Family
vidar
Version
11
Botnet
4b74261d834413e886f920a1e9dc5b33
C2
https://steamcommunity.com/profiles/76561199780418869
https://t.me/ae5ed
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2404-9-0x0000000000400000-0x0000000000676000-memory.dmp
Headers
Sections