General
-
Target
3348-4015-0x0000000000400000-0x0000000000429000-memory.dmp
-
Size
164KB
-
MD5
b2bb1d8ad289a1d6a2150840e8b052f3
-
SHA1
0665c6017b303cc15a0f1f85d7abb46345205aae
-
SHA256
3af7d457a81e0b1db31e7b247937109412b00865112a53fd4fed9b8e64b8c9eb
-
SHA512
3a54e4df1df4bdd9652cebf472c335e6cb5765806e6afbe968af04b0160412ce08069ff720a183bcfe6939e1d46c9861249e7016fcb029b3d565234b07f82354
-
SSDEEP
3072:aVvH8RuVrLyEj/S2CUGACcceJd/klDHa/R8mxu3s8Qb5u:KH8RuRLlzgUd6a/Aslb5u
Score
10/10
Malware Config
Extracted
Family
vidar
Botnet
ir7am
C2
https://t.me/l793oy
https://steamcommunity.com/profiles/76561199829660832
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0
Signatures
-
Detect Vidar Stealer 1 IoCs
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3348-4015-0x0000000000400000-0x0000000000429000-memory.dmp
Headers
Sections