Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2772-27-0x...ry.exe

windows7-x64

1

2772-27-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2772-27-0x0000000000400000-0x0000000000465000-memory.dmp

  • Size

    404KB

  • Sample

    231011-l6gj1saa57

  • MD5

    cee3e316c2046775d35e241640b11a60

  • SHA1

    f7a0a1676667aca4f4b1df25366afd0b39b56d32

  • SHA256

    e7f3c603190637122bdbb6a6d4ad379e42279c62a406178db04d570ca9b817d3

  • SHA512

    557d7434831af963ab3fb8d13fbd3f0c05e31437ff6ec94e5971ba18ca6b44f4808f22e844bd5446b768d502bfd60b53300023884aa35520109bde7290684063

  • SSDEEP

    6144:XA+1e4b30YI1zA7I4ucur1srMPOZcFuIR4/hx:3XbkSlNrmOZcFu24

Score
10/10
vidar9c1086d5f8271ebfba1768aa51ce7aad

Malware Config

Extracted

Family

vidar

Version

5.9

Botnet

9c1086d5f8271ebfba1768aa51ce7aad

C2

https://steamcommunity.com/profiles/76561199557479327

https://t.me/grizmons
Attributes
  • profile_id_v2

    9c1086d5f8271ebfba1768aa51ce7aad

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 OPR/104.0.0.0

Targets

    • Target

      2772-27-0x0000000000400000-0x0000000000465000-memory.dmp

    • Size

      404KB

    • MD5

      cee3e316c2046775d35e241640b11a60

    • SHA1

      f7a0a1676667aca4f4b1df25366afd0b39b56d32

    • SHA256

      e7f3c603190637122bdbb6a6d4ad379e42279c62a406178db04d570ca9b817d3

    • SHA512

      557d7434831af963ab3fb8d13fbd3f0c05e31437ff6ec94e5971ba18ca6b44f4808f22e844bd5446b768d502bfd60b53300023884aa35520109bde7290684063

    • SSDEEP

      6144:XA+1e4b30YI1zA7I4ucur1srMPOZcFuIR4/hx:3XbkSlNrmOZcFu24

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks