Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

1176-146-0...ry.exe

windows7-x64

1

1176-146-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1176-146-0x0000000000400000-0x00000000004DE000-memory.dmp

  • Size

    888KB

  • Sample

    240312-12rlraea99

  • MD5

    cb71ee11a2e1a879da0444f790cdfdd3

  • SHA1

    3c68ab639f308564aca460329d3513d217183c05

  • SHA256

    f0e8b4cdd2e736255c5de65faace2362daded385bb01012def3ac2add9149ca1

  • SHA512

    10cfcc4e4c6c9ac9e02c3b9daf62f088ecd83a4df73cda8c2222085b36c647f88625667e9b1a8ca7f336fb20b96d23561aac23e27da372d1e2ff0cfc38c2b7c0

  • SSDEEP

    6144:skeehzAsTLPXhmXtI88Ndrb8R2edHdeNonXYe6gjuhHRD:skeehT7hpzg4C9eNonjjC

Score
10/10
vidar371995683280220a00f84dafb17a9c7c

Malware Config

Extracted

Family

vidar

Version

4.4

Botnet

371995683280220a00f84dafb17a9c7c

C2

https://steamcommunity.com/profiles/76561199235044780

https://t.me/headlist
Attributes
  • profile_id_v2

    371995683280220a00f84dafb17a9c7c

  • user_agent

    Mozilla/5.0 (Linux; Android 7.0; Pixel C Build/NRD91D; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/53.0.2785.124 Safari/537.36

Targets

    • Target

      1176-146-0x0000000000400000-0x00000000004DE000-memory.dmp

    • Size

      888KB

    • MD5

      cb71ee11a2e1a879da0444f790cdfdd3

    • SHA1

      3c68ab639f308564aca460329d3513d217183c05

    • SHA256

      f0e8b4cdd2e736255c5de65faace2362daded385bb01012def3ac2add9149ca1

    • SHA512

      10cfcc4e4c6c9ac9e02c3b9daf62f088ecd83a4df73cda8c2222085b36c647f88625667e9b1a8ca7f336fb20b96d23561aac23e27da372d1e2ff0cfc38c2b7c0

    • SSDEEP

      6144:skeehzAsTLPXhmXtI88Ndrb8R2edHdeNonXYe6gjuhHRD:skeehT7hpzg4C9eNonjjC

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks