Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

fc56a20905...a5.exe

windows7-x64

10

fc56a20905...a5.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    114s
  • max time network
    119s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/10/2022, 15:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fc56a2090569beb0cb5b1298a5db34cc932b356c0654ccb1b4fdf1da0cb3a7a5.exe

  • Size

    682KB

  • MD5

    358dbf8c22debd338aabcd3fbe106445

  • SHA1

    35a6b653458f925357b557a39d36b65f586ac009

  • SHA256

    fc56a2090569beb0cb5b1298a5db34cc932b356c0654ccb1b4fdf1da0cb3a7a5

  • SHA512

    01e1d2f4c4f1fb1e439e4734b1acb4ac75c449f65f7c9e4d888671284a923a9ba9dcfa9c033bae49c20776b4206ce77e30fabc2ea1b437547ae6d4a50dd74199

  • SSDEEP

    12288:BgoLOArxbVkI4VH/BC0/8icBBeIYZ8jlu+xzcWyua7VlJ+jZlqxRCQs+B6ezdQCI:6Sjlt16MtLgMis0blOG4DAglEO1AIrz1

Score
10/10
vidarstealer

Malware Config

Signatures

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar
  • Vidar Stealer 1 IoCs
    stealer
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fc56a2090569beb0cb5b1298a5db34cc932b356c0654ccb1b4fdf1da0cb3a7a5.exe
    "C:\Users\Admin\AppData\Local\Temp\fc56a2090569beb0cb5b1298a5db34cc932b356c0654ccb1b4fdf1da0cb3a7a5.exe"
    1⤵
      PID:4012
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4012 -s 468
        2⤵
        • Program crash
        PID:1360
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4012 -ip 4012
      1⤵
        PID:4000

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4012-132-0x0000000000D20000-0x0000000000DD0000-memory.dmp

        Filesize

        704KB

        Download