Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fb5779b65d53493815bca3dc5194c8a48bac3ecef7266358524890211f714d8a

  • Size

    6.6MB

  • Sample

    240305-pys5mafa2y

  • MD5

    1c416d691f3002db2e50c10790b86397

  • SHA1

    b96103164ea6bf2c2992391977df1fe46852b5a4

  • SHA256

    fb5779b65d53493815bca3dc5194c8a48bac3ecef7266358524890211f714d8a

  • SHA512

    8600155ce0ba90241b4562d811b8172752c6996f72775f438859eeac04f6c135954de458b07f5cd8db1b404824b6b7e52cbdcce1eb340ae168303ee09c8abb91

  • SSDEEP

    196608:lqHYaQaA+wSeZVijoH9egJ1jFumVjbRZ8v:lKYJDx99jbRZ8v

Malware Config

Extracted

Family

vidar

Version

7.9

Botnet

b04533ad3d11c9398985823d3ccaaa49

C2

https://t.me/hypergog

https://steamcommunity.com/profiles/76561199642171824

Attributes
  • profile_id_v2

    b04533ad3d11c9398985823d3ccaaa49

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36

Targets

    • Target

      fb5779b65d53493815bca3dc5194c8a48bac3ecef7266358524890211f714d8a

    • Size

      6.6MB

    • MD5

      1c416d691f3002db2e50c10790b86397

    • SHA1

      b96103164ea6bf2c2992391977df1fe46852b5a4

    • SHA256

      fb5779b65d53493815bca3dc5194c8a48bac3ecef7266358524890211f714d8a

    • SHA512

      8600155ce0ba90241b4562d811b8172752c6996f72775f438859eeac04f6c135954de458b07f5cd8db1b404824b6b7e52cbdcce1eb340ae168303ee09c8abb91

    • SSDEEP

      196608:lqHYaQaA+wSeZVijoH9egJ1jFumVjbRZ8v:lKYJDx99jbRZ8v

MITRE ATT&CK Enterprise v15

Tasks