vidar | 3508-317-0x0000000000400000-0x0000000000460000-memory[.]dmp

General

Target
3508-317-0x0000000000400000-0x0000000000460000-memory.dmp
Size 384KB
Sample221113-s48ztabe94
SHA256 4ecbbe2e536f6e45047b065b20d7a0176986265f58db711de2809e6b1d010e34
MD5 f756f9e00dab2a92a93519e4b4999b98
SHA1 26a15fb3a59f7c4f62d1b2e5ae1545065d751e05
SHA512 9dde3f5efd796991b1684bb2ac8b710d8a2b441831b806f94dd5754457c40a7b5a5c4588ced842d091c546522ace31987d9ac66adc3fd518ca7cd36ec22f8938
SSDEEP 3072:nU0yRNRrtux0NdOjFQdbKSDPu/UaQatL95zvKVuWGDDt3naW4VTTgEIHRvUZL+Ck:nU0yRnr6F4bHPu/U+t37t5nGQ9xvUoL
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

517 vidar

Family

Version

Botnet

C2

Attributes

SHA256 4ecbbe2e536f6e45047b065b20d7a0176986265f58db711de2809e6b1d010e34
MD5 f756f9e00dab2a92a93519e4b4999b98
SHA1 26a15fb3a59f7c4f62d1b2e5ae1545065d751e05
SHA512 9dde3f5efd796991b1684bb2ac8b710d8a2b441831b806f94dd5754457c40a7b5a5c4588ced842d091c546522ace31987d9ac66adc3fd518ca7cd36ec22f8938
SSDEEP 3072:nU0yRNRrtux0NdOjFQdbKSDPu/UaQatL95zvKVuWGDDt3naW4VTTgEIHRvUZL+Ck:nU0yRnr6F4bHPu/U+t37t5nGQ9xvUoL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

147564

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths