General
-
Target
2052-118-0x0000000001250000-0x00000000014A9000-memory.dmp
-
Size
2.3MB
-
MD5
e3354f63ee5de6c4c9ec859f839650bf
-
SHA1
699781a638a8a7b84094fdbfd55e52578242b6e2
-
SHA256
1068f9ccba9b86393bdf11ce089c1660585c94a666ddf3710286bc58c298f970
-
SHA512
746f5c47feb5dfb2b2d9a864a39e0ff88412a60bfe5fe170a9aa7660085f5dddeb7d24bb43ecd11b83072fbc3e3fac436a3c2506e0c62161ba28001445f60f68
-
SSDEEP
6144:lrgjG2w9rcNZf3aJlRNhJbkrU3zO+B988AOarL:lrgjGoob2SO+BxA3f
Score
10/10
Malware Config
Extracted
Family
vidar
Version
11.8
Botnet
93e4f2dec1428009f8bc755e83a21d1b
C2
https://t.me/fu4chmo
https://steamcommunity.com/profiles/76561199802540894
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Stealc family
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2052-118-0x0000000001250000-0x00000000014A9000-memory.dmp
Headers
Sections