General
-
Target
2456-13-0x0000000000400000-0x0000000000700000-memory.dmp
-
Size
3.0MB
-
MD5
435a72689bff8dded87959a891a9f3a2
-
SHA1
8dca8f2a09b38d774b4ad549407e4966274b9c10
-
SHA256
acbae9ff5fba3f9364b074e683ddb011eb860dfd9720732282bdc2f065134fb5
-
SHA512
792b0a455cf09ee1da0e9c3a3689eededd5cb79d416f106f3a7f8d8f8d7105933b35465d7ae43672d6c14643671eaf03b6ef836dc2e025f617ebc19852625b5c
-
SSDEEP
24576:q4k660d+VX0Hb9biMGNL/geFyNcTN+jv75TQn652VBuNybZ:qGQ0BbhGJtF4ch+jvNm0Nyb
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/asg7rd
https://steamcommunity.com/profiles/76561199794498376
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2456-13-0x0000000000400000-0x0000000000700000-memory.dmp
Headers
Sections