General
-
Target
1064-16-0x0000000000400000-0x0000000000657000-memory.dmp
-
Size
2.3MB
-
MD5
f47b10441a10587a7acb4f6544a7a0b6
-
SHA1
71edb5c43e6e800c7f8d24e21c9a86feb1225d0c
-
SHA256
c368df59fd3fda058b68ac5b244c40e9b98b1d167888642fdb5b7b496b38af2c
-
SHA512
6f96c91cf5d1b29995554f814c35142612aae8a5b2e24d57aca41608bf7cae0a1677b5517447add8f1c6cf4485738cf4c980899b1ebbbfa6eddd1cb65a46659d
-
SSDEEP
3072:aPZwlX9MbkzV5GdSTnQB9IzAc1xwb2b+cWN+EyrYfrBhCemFq0vTp8Hrab4dAu3m:wwlNM47G+nQTszwb2OyYvhw8k+Au3l
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/fneogr
https://t.me/edm0d
https://steamcommunity.com/profiles/76561199768374681
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1064-16-0x0000000000400000-0x0000000000657000-memory.dmp
Headers
Sections