Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JC_5b4bced547eb17aa796a64c58e89f9d96e56edab6596e02ec13801bf5d452b97

  • Size

    315KB

  • Sample

    231012-sqvj9sga6t

  • MD5

    d08fb132524e824ca66d315b6fb23ea1

  • SHA1

    85d6aae899ae56b45a493d6a65edb460d70f75f2

  • SHA256

    5b4bced547eb17aa796a64c58e89f9d96e56edab6596e02ec13801bf5d452b97

  • SHA512

    266e78d04fab571a36fc97946736c2c96721344c33d28699d13a5f9fb2b8673229acbb20d3a8ece1e17dfae4c06fa6fc2360e15da2cdc0003eae3d6b7fdf475c

  • SSDEEP

    6144:4lJ8wtt/Lod5A0mehi5DGWpmpvcX2Dp7M6Py3OXBjBPTE:43bMbA3SiEbvcX2Dp7V63ORlb

Malware Config

Extracted

Family

vidar

Version

5.6

Botnet

e881aaf79bbebc43874722496eacba76

C2

https://steamcommunity.com/profiles/76561199550790047

https://t.me/bonoboaz

Attributes
  • profile_id_v2

    e881aaf79bbebc43874722496eacba76

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 OPR/103.0.0.0

Targets

    • Target

      JC_5b4bced547eb17aa796a64c58e89f9d96e56edab6596e02ec13801bf5d452b97

    • Size

      315KB

    • MD5

      d08fb132524e824ca66d315b6fb23ea1

    • SHA1

      85d6aae899ae56b45a493d6a65edb460d70f75f2

    • SHA256

      5b4bced547eb17aa796a64c58e89f9d96e56edab6596e02ec13801bf5d452b97

    • SHA512

      266e78d04fab571a36fc97946736c2c96721344c33d28699d13a5f9fb2b8673229acbb20d3a8ece1e17dfae4c06fa6fc2360e15da2cdc0003eae3d6b7fdf475c

    • SSDEEP

      6144:4lJ8wtt/Lod5A0mehi5DGWpmpvcX2Dp7M6Py3OXBjBPTE:43bMbA3SiEbvcX2Dp7V63ORlb

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

MITRE ATT&CK Enterprise v15

Tasks