General
-
Target
1232-12-0x0000000000400000-0x0000000000676000-memory.dmp
-
Size
2.5MB
-
MD5
9dbf05374f2ed8b022bc55892453c82f
-
SHA1
5b949ad07bb9d9632b89e61a4e5bd35e1f7bc3fe
-
SHA256
ffd477757889343a3b8001e7d3a0b28c1bff289cd350f5d45b93c4600382fe56
-
SHA512
78c3a8fb54fb91a92b34aca1840390c1824fcdd0c7026df3e8f59954c4eb797db37bbdf4bb01328b6308d694726d286ff0dd2ca0ba601de3d9c18497125e571a
-
SSDEEP
12288:8GOv3+N11n5ALvpjTACnxBek0VYExdZa:8GOv3+N11n5ALvpjTAQxBe4O
Score
10/10
Malware Config
Extracted
Family
vidar
Version
11.1
Botnet
0b3bd69430b7d827b107ba2ed809207d
C2
https://steamcommunity.com/profiles/76561199786602107
https://t.me/lpnjoke
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1232-12-0x0000000000400000-0x0000000000676000-memory.dmp
Headers
Sections