General
-
Target
2708-6-0x0000000000400000-0x0000000000700000-memory.dmp
-
Size
3.0MB
-
MD5
82942faadaaec2ce0794d03faa70b3f9
-
SHA1
1e9c74e266ac8a8d1b6f232f0a71ba416c644241
-
SHA256
23385bf748e4c12cbeba3b709bbe295bef2a016957c51e44d135673b8c900c5a
-
SHA512
1071b1fc98070581b92c16db31ddb0b2d5d8b9e6d559998ebff9cb1ef10148fa4b66e56425f2431ab0c8189df397e51e946deb58f703a009b444100b471659ba
-
SSDEEP
24576:q4k660d+VX0Hs9biMGNL/geFyNcTN+jv75TQn652VBuNyb:qGQ0ybhGJtF4ch+jvNm0Nyb
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/asg7rd
https://steamcommunity.com/profiles/76561199794498376
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2708-6-0x0000000000400000-0x0000000000700000-memory.dmp
Headers
Sections