Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3ee98502576bb75bbd3d23f6badd7950_mafia_JC.exe

  • Size

    467KB

  • Sample

    230819-p4ty4sab37

  • MD5

    3ee98502576bb75bbd3d23f6badd7950

  • SHA1

    bc89c531473eb1e01ef97b9a555d58d9a7b8e5fa

  • SHA256

    42cc34d4ba23111d3e3e38bbbc10131205af49e6c1029a8327d22f2e4d5e0ba2

  • SHA512

    02fb63a2ebd9e0f0994913762f037dde5fa36e56e747ddd00c00aedbc026f1af0753527318c0d56724ced3cc2a53f4d5c3a574773d2c953d1ebb9ccaed6bca5e

  • SSDEEP

    12288:GMqFYULoWzniwtgGbl6mw/YAMOtwhF5JBqyhCnGe+:GMqFbniCgGZ6T/DMO25JzcnGd

Malware Config

Extracted

Family

vidar

Version

5

Botnet

15c6590ec29e781c81fbc56d7ba99f06

C2

https://t.me/versozaline

https://steamcommunity.com/profiles/76561199532186526

Attributes
  • profile_id_v2

    15c6590ec29e781c81fbc56d7ba99f06

  • user_agent

    Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0

Targets

    • Target

      3ee98502576bb75bbd3d23f6badd7950_mafia_JC.exe

    • Size

      467KB

    • MD5

      3ee98502576bb75bbd3d23f6badd7950

    • SHA1

      bc89c531473eb1e01ef97b9a555d58d9a7b8e5fa

    • SHA256

      42cc34d4ba23111d3e3e38bbbc10131205af49e6c1029a8327d22f2e4d5e0ba2

    • SHA512

      02fb63a2ebd9e0f0994913762f037dde5fa36e56e747ddd00c00aedbc026f1af0753527318c0d56724ced3cc2a53f4d5c3a574773d2c953d1ebb9ccaed6bca5e

    • SSDEEP

      12288:GMqFYULoWzniwtgGbl6mw/YAMOtwhF5JBqyhCnGe+:GMqFbniCgGZ6T/DMO25JzcnGd

    Score
    3/10

MITRE ATT&CK Matrix

Tasks