Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

324-341-0x...ry.exe

windows7-x64

1

324-341-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    324-341-0x0000000000400000-0x0000000000465000-memory.dmp

  • Size

    404KB

  • Sample

    231012-kqa7mahf4v

  • MD5

    bc91fdb5dace0ef91ee750b6e64fb478

  • SHA1

    1852c9e16695e9038e2d653e80a71f99dd2ad345

  • SHA256

    c60a43a68fa0897ff17f2a6c70325c9d82c3a4d7bc71293a0972f75dd5bbaacf

  • SHA512

    88d844cc1e1376963aa5a3493cc35972e50be51e8fc8b80d4f4f04c6106658a890e3b91d5fb1079a81ae821109087edfe43fbe3fa28a4c408dab272b3cedd4a4

  • SSDEEP

    6144:zA+1e4b30YI1zA7I4ucur1srMPOZcFhIR+/hxOAXD3Pl:LXbkSlNrmOZcFh2+1XDN

Score
10/10
vidarb4fc4cd2d76417bf461814b9d989fcdb

Malware Config

Extracted

Family

vidar

Version

5.9

Botnet

b4fc4cd2d76417bf461814b9d989fcdb

C2

https://steamcommunity.com/profiles/76561199557479327

https://t.me/grizmons
Attributes
  • profile_id_v2

    b4fc4cd2d76417bf461814b9d989fcdb

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 OPR/104.0.0.0

Targets

    • Target

      324-341-0x0000000000400000-0x0000000000465000-memory.dmp

    • Size

      404KB

    • MD5

      bc91fdb5dace0ef91ee750b6e64fb478

    • SHA1

      1852c9e16695e9038e2d653e80a71f99dd2ad345

    • SHA256

      c60a43a68fa0897ff17f2a6c70325c9d82c3a4d7bc71293a0972f75dd5bbaacf

    • SHA512

      88d844cc1e1376963aa5a3493cc35972e50be51e8fc8b80d4f4f04c6106658a890e3b91d5fb1079a81ae821109087edfe43fbe3fa28a4c408dab272b3cedd4a4

    • SSDEEP

      6144:zA+1e4b30YI1zA7I4ucur1srMPOZcFhIR+/hxOAXD3Pl:LXbkSlNrmOZcFh2+1XDN

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks