vidar | 99660-248-0x0000000000400000-0x000000000045E000-memory[.]dmp

General

Target
99660-248-0x0000000000400000-0x000000000045E000-memory.dmp
Size 376KB
Sample221026-retcdsfhc3
SHA256 6aa82b5f91983a29b0a051b88d8c4e9a33dae81b5cd0913cdab6d586b6d93fe2
MD5 1d2de5ab8ad01e1d2f05d6e5d61aa246
SHA1 f4a3152728b64a7c4079c9fb6b8adf0b1de6c849
SHA512 2fbb2ed8b1714c935852408e9cf7fef8dc5d8ad8e49c98f4a51bd75e3cf54e3f7d06bf7ca4279d02e13f16dceb9140c735153d0e120e7c02448b912be243ec7f
SSDEEP 3072:zT8IHnYWyQxavyUQp7/jNBLkmo2Z4fQW5JKR+mMh7mikkrrb0HqXU1amfo+l590:zTpP5/remHEPmXrOZXUEmdn6
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

517 vidar

Family

Version

Botnet

C2

Attributes

SHA256 6aa82b5f91983a29b0a051b88d8c4e9a33dae81b5cd0913cdab6d586b6d93fe2
MD5 1d2de5ab8ad01e1d2f05d6e5d61aa246
SHA1 f4a3152728b64a7c4079c9fb6b8adf0b1de6c849
SHA512 2fbb2ed8b1714c935852408e9cf7fef8dc5d8ad8e49c98f4a51bd75e3cf54e3f7d06bf7ca4279d02e13f16dceb9140c735153d0e120e7c02448b912be243ec7f
SSDEEP 3072:zT8IHnYWyQxavyUQp7/jNBLkmo2Z4fQW5JKR+mMh7mikkrrb0HqXU1amfo+l590:zTpP5/remHEPmXrOZXUEmdn6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

131164

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths