Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JC_5b4bced547eb17aa796a64c58e89f9d96e56edab6596e02ec13801bf5d452b97

  • Size

    315KB

  • Sample

    231012-sqvj9sga6t

  • MD5

    d08fb132524e824ca66d315b6fb23ea1

  • SHA1

    85d6aae899ae56b45a493d6a65edb460d70f75f2

  • SHA256

    5b4bced547eb17aa796a64c58e89f9d96e56edab6596e02ec13801bf5d452b97

  • SHA512

    266e78d04fab571a36fc97946736c2c96721344c33d28699d13a5f9fb2b8673229acbb20d3a8ece1e17dfae4c06fa6fc2360e15da2cdc0003eae3d6b7fdf475c

  • SSDEEP

    6144:4lJ8wtt/Lod5A0mehi5DGWpmpvcX2Dp7M6Py3OXBjBPTE:43bMbA3SiEbvcX2Dp7V63ORlb

Malware Config

Extracted

Family

vidar

Version

5.6

Botnet

e881aaf79bbebc43874722496eacba76

C2

https://steamcommunity.com/profiles/76561199550790047

https://t.me/bonoboaz

Attributes
  • profile_id_v2

    e881aaf79bbebc43874722496eacba76

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 OPR/103.0.0.0

Targets

    • Target

      JC_5b4bced547eb17aa796a64c58e89f9d96e56edab6596e02ec13801bf5d452b97

    • Size

      315KB

    • MD5

      d08fb132524e824ca66d315b6fb23ea1

    • SHA1

      85d6aae899ae56b45a493d6a65edb460d70f75f2

    • SHA256

      5b4bced547eb17aa796a64c58e89f9d96e56edab6596e02ec13801bf5d452b97

    • SHA512

      266e78d04fab571a36fc97946736c2c96721344c33d28699d13a5f9fb2b8673229acbb20d3a8ece1e17dfae4c06fa6fc2360e15da2cdc0003eae3d6b7fdf475c

    • SSDEEP

      6144:4lJ8wtt/Lod5A0mehi5DGWpmpvcX2Dp7M6Py3OXBjBPTE:43bMbA3SiEbvcX2Dp7V63ORlb

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.