General
-
Target
712-1064-0x0000000000400000-0x0000000000422000-memory.dmp
-
Size
136KB
-
MD5
c8c509b466ccd7d5da9b4259a83bd095
-
SHA1
4d175da309b9aaac0b713f4957d1c7e95b360bd3
-
SHA256
e1b451d745034adc9f9c98f87644fd390d724dabfc2997a562ee33612f3a0085
-
SHA512
4220dcbc6a81a42b8731d6a3a7c4e911c6e1b06f9ff4d9d750ecbe9c848303e98f0108de2994204b42410b68947477dd5feaf472ce2aa86e3e52ff4a27402ac3
-
SSDEEP
3072:FEFRh0auCcJVwDjwzTC2SCn/FtVQenIuxIGWsnRR9pLTflvXUD:W3h0aMJ+Hw3Pgen79/dvE
Score
10/10
Malware Config
Extracted
Family
vidar
C2
https://t.me/g02f04
https://steamcommunity.com/profiles/76561199828130190
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
712-1064-0x0000000000400000-0x0000000000422000-memory.dmp
Headers
Sections