Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

1116-56-0x...ry.exe

windows7-x64

1116-56-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1116-56-0x0000000000400000-0x0000000000A22000-memory.dmp

  • Size

    6.1MB

  • Sample

    230314-e1nmtadc55

  • MD5

    4a08b3dc7d9a9923e9c2b467bb27b0aa

  • SHA1

    669aafb805761564f67fe6e77723c611f81d8428

  • SHA256

    57b706e38139c83c4bf9bdca0280cedf3f5185c91d75a71a37fca748bc07a9a7

  • SHA512

    cbf6df317fbb79747ae12c84d23d928a6953ab7e8be28a455db004ee9de333ad063a1c01ee2bf97a94e00c977d5951f88f1b09a18ef0a8aaa2a035c6b35fcddb

  • SSDEEP

    196608:I0nAVcO0jG9bTIYAuTHYIDX4mR4JdnW3aj:UVcfjGJTIYpHvIe4DW

Score
10/10
vidaref400d64ade8db9c118b69928da0152d

Malware Config

Extracted

Family

vidar

Version

3

Botnet

ef400d64ade8db9c118b69928da0152d

C2

https://t.me/zaskullz

https://steamcommunity.com/profiles/76561199486572327

http://135.181.87.234:80
Attributes
  • profile_id_v2

    ef400d64ade8db9c118b69928da0152d

Targets

    • Target

      1116-56-0x0000000000400000-0x0000000000A22000-memory.dmp

    • Size

      6.1MB

    • MD5

      4a08b3dc7d9a9923e9c2b467bb27b0aa

    • SHA1

      669aafb805761564f67fe6e77723c611f81d8428

    • SHA256

      57b706e38139c83c4bf9bdca0280cedf3f5185c91d75a71a37fca748bc07a9a7

    • SHA512

      cbf6df317fbb79747ae12c84d23d928a6953ab7e8be28a455db004ee9de333ad063a1c01ee2bf97a94e00c977d5951f88f1b09a18ef0a8aaa2a035c6b35fcddb

    • SSDEEP

      196608:I0nAVcO0jG9bTIYAuTHYIDX4mR4JdnW3aj:UVcfjGJTIYpHvIe4DW

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks