Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d8f1007d6972e6195fb62d72c86115a23910ca170467b4b29e18b7b1eb25160

  • Size

    367KB

  • Sample

    230422-aab4wach3t

  • MD5

    af52b4c285c14f54c5b99928cc6f55a3

  • SHA1

    074dce9ee00c1af2ac2bcc3e820392a4dd797145

  • SHA256

    4d8f1007d6972e6195fb62d72c86115a23910ca170467b4b29e18b7b1eb25160

  • SHA512

    744d70383e4006c7a00a328c7770b170902d89d624d4d0a8fe7d58fbc0da022c2e0e79ac9c582edf5c3951ab958013eedf5caf3914af1a09de372d1168f9e9a5

  • SSDEEP

    6144:9R6GnwcPrY7H1yRDuoO4xIuipj89ZPhPYp:T6cNPrY7URDuoJxIjpjqhgp

Score
10/10
vidar2234cb18bdcd93ea6f4e5f1473025a81discoveryspywarestealer

Malware Config

Extracted

Family

vidar

Version

3.5

Botnet

2234cb18bdcd93ea6f4e5f1473025a81

C2

https://steamcommunity.com/profiles/76561199497218285

https://t.me/tg_duckworld
Attributes
  • profile_id_v2

    2234cb18bdcd93ea6f4e5f1473025a81

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36 Vivaldi/3.7

Targets

    • Target

      4d8f1007d6972e6195fb62d72c86115a23910ca170467b4b29e18b7b1eb25160

    • Size

      367KB

    • MD5

      af52b4c285c14f54c5b99928cc6f55a3

    • SHA1

      074dce9ee00c1af2ac2bcc3e820392a4dd797145

    • SHA256

      4d8f1007d6972e6195fb62d72c86115a23910ca170467b4b29e18b7b1eb25160

    • SHA512

      744d70383e4006c7a00a328c7770b170902d89d624d4d0a8fe7d58fbc0da022c2e0e79ac9c582edf5c3951ab958013eedf5caf3914af1a09de372d1168f9e9a5

    • SSDEEP

      6144:9R6GnwcPrY7H1yRDuoO4xIuipj89ZPhPYp:T6cNPrY7URDuoJxIjpjqhgp

    Score
    10/10
    vidar2234cb18bdcd93ea6f4e5f1473025a81discoveryspywarestealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses 2FA software files, possible credential harvesting

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks