Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
727a881f1ddb5b179e1b6177275a7d3479bbe75092e5305c2fd967100a816389
-
Size
1.9MB
-
Sample
240606-pammyaeh55
-
MD5
71ab51dd9e666f8cc7040b9dabaf6497
-
SHA1
dda6f9ad37192842c013e8e2d39d56fe789fca65
-
SHA256
727a881f1ddb5b179e1b6177275a7d3479bbe75092e5305c2fd967100a816389
-
SHA512
a201a579983cc6fe19c6cbaa8dc1806e6792963be97519c8ae8753003a7238a698017865d0f68d1378dda9544b0cf7f49ae6589e6635964c1151457d5039405e
-
SSDEEP
24576:n/eC7bzaXi7m04Ju0LXolGLbJnR/z4+EbVbw2qug4ctOlQLernWO:nGYz0P04MS4cdR/z4+UVi4e9Crn
Static task
static1
Behavioral task
behavioral1
Sample
727a881f1ddb5b179e1b6177275a7d3479bbe75092e5305c2fd967100a816389.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
stealc
Extracted
vidar
https://t.me/r8z0l
https://steamcommunity.com/profiles/76561199698764354
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Targets
-
-
Target
727a881f1ddb5b179e1b6177275a7d3479bbe75092e5305c2fd967100a816389
-
Size
1.9MB
-
MD5
71ab51dd9e666f8cc7040b9dabaf6497
-
SHA1
dda6f9ad37192842c013e8e2d39d56fe789fca65
-
SHA256
727a881f1ddb5b179e1b6177275a7d3479bbe75092e5305c2fd967100a816389
-
SHA512
a201a579983cc6fe19c6cbaa8dc1806e6792963be97519c8ae8753003a7238a698017865d0f68d1378dda9544b0cf7f49ae6589e6635964c1151457d5039405e
-
SSDEEP
24576:n/eC7bzaXi7m04Ju0LXolGLbJnR/z4+EbVbw2qug4ctOlQLernWO:nGYz0P04MS4cdR/z4+UVi4e9Crn
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-