General
-
Target
3436-52-0x0000000000400000-0x0000000000700000-memory.dmp
-
Size
3.0MB
-
MD5
b08c796d877dda9c47eb566b5908e9a5
-
SHA1
e5d9d6ffef67485270b5e9ad85019b1f46178ea7
-
SHA256
4b4e78201f49b638484404abc941f3996241eca0133eac60f0fa77f0a9737a1d
-
SHA512
8b1f30b24dcf179d8fa7dc00c031b3d59c801a8e97f1eeed4f77da3db6e62b5bc1cbd95c4d69df24014679d00679f886532f62023331f5ac1c66167d2b2563a0
-
SSDEEP
24576:EjfMVHefX7eO2g0YPMGNL/geFyNcTN+jv75TQn652VBuNyb2i:yEQreOR0RGJtF4ch+jvNm0Nyb2
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/asg7rd
https://steamcommunity.com/profiles/76561199794498376
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3436-52-0x0000000000400000-0x0000000000700000-memory.dmp
Headers
Sections