General
-
Target
2680-8-0x0000000000400000-0x0000000000676000-memory.dmp
-
Size
2.5MB
-
MD5
4c6395638160f5635a79a5b226a574a2
-
SHA1
599b714dc6ecad929865b84bf75bcd66e25aa495
-
SHA256
d7751db724d63922c084534d10a9878c15aa0f2d5a618e1bc1d8737fe9638580
-
SHA512
a17303533ef2599b7e17531d7a59112af8b750581dcc2084214311c5d329e5ac7cca60107a2566f8150f42d5b1cc3abb5613f799bd99f1bf8c6c52132aa1d601
-
SSDEEP
12288:KE2i3KghRiAqqUEGq60dKb1L0VYExdZaZ:KE2i3KghRiAqqUEGq6AKb15O
Score
10/10
Malware Config
Extracted
Family
vidar
Botnet
8ecc9c7eaebfdf2a8cc0586d7419d6ea
C2
https://t.me/maslengdsa
https://steamcommunity.com/profiles/76561199786602107
https://t.me/lpnjoke
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2680-8-0x0000000000400000-0x0000000000676000-memory.dmp
Headers
Sections