General
-
Target
1276-432-0x0000000000630000-0x0000000000930000-memory.dmp
-
Size
3.0MB
-
MD5
75f4485527624c713ded27f2665794f8
-
SHA1
f8407ee7e2572c20d6fc2995008f2fef679767e1
-
SHA256
b9ca507027e510e0562eccf9f4fcaaf8e54f98d46bebfda97845cfc3412eacee
-
SHA512
71b8716a3071ab3e2698a78275b105aad16850844f149426882b51d492da2fffccd635daf646f648ee4701e5ce168150a37ac295be0ee78ca43aa422bfd68cce
-
SSDEEP
24576:turXZqDhOpV+MGNL/geFyNcTN+jv75TQn652VBuNybd:yXIDyV1GJtF4ch+jvNm0Nybd
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/asg7rd
https://steamcommunity.com/profiles/76561199794498376
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1276-432-0x0000000000630000-0x0000000000930000-memory.dmp
Headers
Sections