vidar | 102248-218-0x0000000000400000-0x000000000045E000-memory[.]dmp

General

Target
102248-218-0x0000000000400000-0x000000000045E000-memory.dmp
Size 376KB
Sample221025-deqplsbch8
SHA256 aa26db6806a4a19f5aa0a10ee25db1faa2b2c76b88e730a5ecf5d9cf680f9e0b
MD5 c49da1984ceb6396992a8853189df57f
SHA1 f24e3998e69b72d5cf8888324031bb78de265233
SHA512 6bae085886e60ad2e4cc1185ddfa6b283bac138c12ada125b7ba4627d327ec6daf5916fb3b6cae742a3b8d991aa977ae30f814a438e09bcccf6157766a6d5865
SSDEEP 3072:zT8IHnYWyQxavyUQp7/jNBLkmo2Z4fQW5JKR+mMh7mikkrrb0HqXU1amfo+L590:zTpP5/remHEPmXrOZXUEmdl6
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

517 vidar

Family

Version

Botnet

C2

Attributes

SHA256 aa26db6806a4a19f5aa0a10ee25db1faa2b2c76b88e730a5ecf5d9cf680f9e0b
MD5 c49da1984ceb6396992a8853189df57f
SHA1 f24e3998e69b72d5cf8888324031bb78de265233
SHA512 6bae085886e60ad2e4cc1185ddfa6b283bac138c12ada125b7ba4627d327ec6daf5916fb3b6cae742a3b8d991aa977ae30f814a438e09bcccf6157766a6d5865
SSDEEP 3072:zT8IHnYWyQxavyUQp7/jNBLkmo2Z4fQW5JKR+mMh7mikkrrb0HqXU1amfo+L590:zTpP5/remHEPmXrOZXUEmdl6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

131164

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths