General
-
Target
2796-8-0x0000000000400000-0x0000000000659000-memory.dmp
-
Size
2.3MB
-
MD5
757d239ce6679daac120715a644c1ac4
-
SHA1
18dbc41c05c8e9b4aff7341b3da3e227cd905da7
-
SHA256
feb2ff9e4fae03c8bc5b2e33990793aa7c362df70150dce38ea304f03d439ef1
-
SHA512
70b54a8c6e220e8b263922c7b6a00000ca72a1bfb9834e463f873714d1356654a9deab9f6a0048a52dbb50e0785421f7c09712ce164e3dac045842cb7ee2c832
-
SSDEEP
6144:Ph0ZpFC4sffny7TuLBdZlT4DIJYdy3M8i:Ph0ZpFCfB3TGyYy3/i
Score
10/10
Malware Config
Extracted
Family
vidar
Version
11.8
Botnet
8ff0797948d4b39f051a704ea27bdbde
C2
https://t.me/fu4chmo
https://steamcommunity.com/profiles/76561199802540894
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Stealc family
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2796-8-0x0000000000400000-0x0000000000659000-memory.dmp
Headers
Sections