General
-
Target
6412-1878-0x0000000000A00000-0x0000000000D00000-memory.dmp
-
Size
3.0MB
-
MD5
3007bc40b46129c1dbddccdb586f2d4f
-
SHA1
b9c929baa5b3c9b897abec3f26d9c06062d6f6eb
-
SHA256
3e24592ad50b34040a8fc0e4fa65a95cdd1e45c9f0218e341056b2101f203ae8
-
SHA512
ae8507550aa95aae279fa55ab6b919290c973e211f5b8826be37bcb58571668c4c790bb87b6e96229c15370782ba5c571639868545f2dba2ab3a13a0bb6872ca
-
SSDEEP
24576:KIJS3goXObriEwMGNL/geFyNcTN+jv75TQn652VBuNyb4:ps3Z+bWELGJtF4ch+jvNm0Nyb4
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/asg7rd
https://steamcommunity.com/profiles/76561199794498376
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6412-1878-0x0000000000A00000-0x0000000000D00000-memory.dmp
Headers
Sections