Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

4876-338-0...ry.exe

windows7-x64

1

4876-338-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4876-338-0x0000000000400000-0x0000000000471000-memory.dmp

  • Size

    452KB

  • Sample

    230319-r1qtdsah2t

  • MD5

    16ba31bbae44ba635d982dade82095cf

  • SHA1

    106741b12954b5e8785395e803d214e9c1267611

  • SHA256

    cd5484d5c0e1c5aab56e5f6447f9da401a8b2964cc44044345fb3665d72fdee9

  • SHA512

    0518aa8b1b88dd56a0e4d7fbb3247b3a32d9ee6b71efa8c1c34b126477aab7d640fb8576fecde0bf7fd8172627ec6c340c3d1267547a5e63fd0e1fe3f08fba69

  • SSDEEP

    6144:xpw8kWACDU/STv8wZlUci6JsjBz+Sf2NktnUTU8n8fslW:Tw8klCOSXlN0Fz+SfW2Kvn80lW

Score
10/10
vidard6ef050131e7d5a1d595c51613328971

Malware Config

Extracted

Family

vidar

Version

3

Botnet

d6ef050131e7d5a1d595c51613328971

C2

https://t.me/zaskullz

https://steamcommunity.com/profiles/76561199486572327

http://135.181.87.234:80
Attributes
  • profile_id_v2

    d6ef050131e7d5a1d595c51613328971

Targets

    • Target

      4876-338-0x0000000000400000-0x0000000000471000-memory.dmp

    • Size

      452KB

    • MD5

      16ba31bbae44ba635d982dade82095cf

    • SHA1

      106741b12954b5e8785395e803d214e9c1267611

    • SHA256

      cd5484d5c0e1c5aab56e5f6447f9da401a8b2964cc44044345fb3665d72fdee9

    • SHA512

      0518aa8b1b88dd56a0e4d7fbb3247b3a32d9ee6b71efa8c1c34b126477aab7d640fb8576fecde0bf7fd8172627ec6c340c3d1267547a5e63fd0e1fe3f08fba69

    • SSDEEP

      6144:xpw8kWACDU/STv8wZlUci6JsjBz+Sf2NktnUTU8n8fslW:Tw8klCOSXlN0Fz+SfW2Kvn80lW

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks