General
-
Target
1548-261-0x0000000000400000-0x0000000000422000-memory.dmp
-
Size
136KB
-
MD5
44f13ad5eab84594a4d44446ac61981c
-
SHA1
318390848ba977591088e633a1bffc028c2ff310
-
SHA256
da3d60e59c12ba4a777b674db98b2b73d09988bd62113eb184c95bb0822b57f6
-
SHA512
33a440c6c609095fee9ebbfdd3b954348b18dc5171174bdd0dc767cce3f87bee23c7636b44f1d53dd7636d1e097937030d2a9f76edcc9ac981ddee35de1dcc0d
-
SSDEEP
3072:4EFRh0auCcJVwDjwzTC2SCn/FtVQenIuxIGWsnRR9pLTfRvXkD:r3h0aMJ+Hw3Pgen79/JvU
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/g02f04
https://steamcommunity.com/profiles/76561199828130190
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1548-261-0x0000000000400000-0x0000000000422000-memory.dmp
Headers
Sections