General
-
Target
2404-1348-0x0000000003690000-0x00000000036B2000-memory.dmp
-
Size
136KB
-
MD5
9a3be80de7d8824da1149a9eb8fe7174
-
SHA1
023ffe2348b93d84ecfb4eb51abe38afab2bae2a
-
SHA256
d041a0790e30059dbe73834e48d038bbb3d366efa4418cfe701099388b0a1daf
-
SHA512
a5727b51c5a164511ac698a87b631e2a84b4e5a795b7641fcf30010c5a3541d607162c374a6dc59b6ffba2f7c213cefe2486b230d345271f76ebf9fe957e7a1f
-
SSDEEP
3072:FEFRh0auCcJVwDjwzTC2SCn/FtVQenIuxIGWsnRR9pLTfSvX6:W3h0aMJ+Hw3Pgen79/qvK
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/sok33tn
https://steamcommunity.com/profiles/76561199824159981
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2404-1348-0x0000000003690000-0x00000000036B2000-memory.dmp
Headers
Sections