General
-
Target
3572-141-0x0000000000310000-0x0000000000569000-memory.dmp
-
Size
2.3MB
-
MD5
6fc9f4b58cf05e7e32838dd3b6302366
-
SHA1
27c27a2ebf1cd035142e77f99f25cfcf1b33edad
-
SHA256
a01005f0bf49f69c7d68bfc3efb90044fa557cb2ac6e232d9b5877ed29f5ebbf
-
SHA512
aeddda33e48d3e4a157461ef997b6b5a7d5f4e75e9c04ee52b4360c6bfddf6f4137b18c9e60495c133529d75ca82e4ec614c9ffc5434a2751ca5f12a4120e157
-
SSDEEP
6144:7zjOr21r19dTpXCbtEOMnABzp6BPg8U3/r0:7zjOrEqMnM96BPbUPY
Score
10/10
Malware Config
Extracted
Family
vidar
Version
11.8
Botnet
41d35cbb974bc2d1287dcd4381b4a2a8
C2
https://t.me/fu4chmo
https://steamcommunity.com/profiles/76561199802540894
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Stealc family
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3572-141-0x0000000000310000-0x0000000000569000-memory.dmp
Headers
Sections