Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    29be445f478586exeexe_JC.exe

  • Size

    337KB

  • Sample

    230714-teyyzsfh91

  • MD5

    29be445f478586f917d0f7a6cee02722

  • SHA1

    0697ecc765d4431caf3390eed46a4a44b017b683

  • SHA256

    6ff6e90d2ebccdb56832212ba15386f15c4d3a2199e3cf7597b542a9525b064e

  • SHA512

    e1b03dfef4f6915050080917376871487e019ba3c64ed60c1bae4538513966f03b29bb610a750d35bdc73da4ca9779efd213e5f61903a2b18da174a9a3c3f4e4

  • SSDEEP

    6144:jXulboUPovpXw4CcUbTqnl0dMtWjHlPwRiLkT1d+Whwk4I:DulbMOR2ea0jViiL4d+BB

Malware Config

Extracted

Family

vidar

Version

4.2

Botnet

2b6f7ac6c0d521255c166cd01d009d8e

C2

https://t.me/rechnungsbetrag

https://t.me/prescilliouns

https://steamcommunity.com/profiles/76561199511129510

Attributes
  • profile_id_v2

    2b6f7ac6c0d521255c166cd01d009d8e

  • user_agent

    Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.38 Safari/537.36 Brave/75

Targets

    • Target

      29be445f478586exeexe_JC.exe

    • Size

      337KB

    • MD5

      29be445f478586f917d0f7a6cee02722

    • SHA1

      0697ecc765d4431caf3390eed46a4a44b017b683

    • SHA256

      6ff6e90d2ebccdb56832212ba15386f15c4d3a2199e3cf7597b542a9525b064e

    • SHA512

      e1b03dfef4f6915050080917376871487e019ba3c64ed60c1bae4538513966f03b29bb610a750d35bdc73da4ca9779efd213e5f61903a2b18da174a9a3c3f4e4

    • SSDEEP

      6144:jXulboUPovpXw4CcUbTqnl0dMtWjHlPwRiLkT1d+Whwk4I:DulbMOR2ea0jViiL4d+BB

    Score
    3/10

MITRE ATT&CK Matrix

Tasks