Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    adabfb0bdf16b84992d75198e641ae1cee694654d1f572885e87650ba2d2b09e

  • Size

    2.4MB

  • Sample

    240523-ymz88seb4v

  • MD5

    91b44d5cf129fba188fa963041b62574

  • SHA1

    a78a8fffdecc3629890a899588205f67090c8266

  • SHA256

    adabfb0bdf16b84992d75198e641ae1cee694654d1f572885e87650ba2d2b09e

  • SHA512

    3dfa06f41ff618e8fcf10f5e8da3153cb6fd3e4ef954b259685fdb69c921521e8c152853b5254e9000e3e3c4e5bc95a8bf094359ac2767ca6f1edea5eef0f1a1

  • SSDEEP

    49152:jxIRJF1HL+VdX68kUGJtTF+TxMoxc1TU+j+dAzGwlrh:jEJF16dX68dGtIuoITsdZ

Malware Config

Extracted

Family

stealc

rc4.plain
1
2910114286690104117195131148

Extracted

Family

vidar

C2

https://steamcommunity.com/profiles/76561199689717899

https://t.me/copterwin

Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0

Targets

    • Target

      adabfb0bdf16b84992d75198e641ae1cee694654d1f572885e87650ba2d2b09e

    • Size

      2.4MB

    • MD5

      91b44d5cf129fba188fa963041b62574

    • SHA1

      a78a8fffdecc3629890a899588205f67090c8266

    • SHA256

      adabfb0bdf16b84992d75198e641ae1cee694654d1f572885e87650ba2d2b09e

    • SHA512

      3dfa06f41ff618e8fcf10f5e8da3153cb6fd3e4ef954b259685fdb69c921521e8c152853b5254e9000e3e3c4e5bc95a8bf094359ac2767ca6f1edea5eef0f1a1

    • SSDEEP

      49152:jxIRJF1HL+VdX68kUGJtTF+TxMoxc1TU+j+dAzGwlrh:jEJF16dX68dGtIuoITsdZ

    • Detect Vidar Stealer

    • Stealc

      Stealc is an infostealer written in C++.

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.