Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2232-16-0x...ry.exe

windows7-x64

10

2232-16-0x...ry.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    13s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2024, 17:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2232-16-0x0000000000400000-0x0000000000676000-memory.exe

  • Size

    2.5MB

  • MD5

    51b08f5b80c24fde08188b06dff52e5c

  • SHA1

    ce5c3965bf39249c580b13a0bcc7dad29c4ea1b5

  • SHA256

    61fe4816b12219ae33981af12fa998dac72b2cce14b31b9c72e8945dff37a306

  • SHA512

    29e8dfed4911449fdfcf18da857771c6e5329ae825e192e2c84205128e6739049bdc24b63ccea899c76c67e084fc645fe4169791d293cb9a0a835bb9ab99f446

  • SSDEEP

    6144:DKynBLh/DXvm55d768PbJ0XoJtmZSZBKkhzXgdg:2uDX+vd7BPF0XutVekhz6g

Score
10/10
vidar9bf5e431869643a2ac397d2dc0d687fbstealer

Malware Config

Extracted

Family

vidar

Version

11

Botnet

9bf5e431869643a2ac397d2dc0d687fb

Signatures

  • Detect Vidar Stealer 1 IoCs
    stealer
  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

Processes

  • C:\Users\Admin\AppData\Local\Temp\2232-16-0x0000000000400000-0x0000000000676000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2232-16-0x0000000000400000-0x0000000000676000-memory.exe"
    1⤵
      PID:1140

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1140-0-0x0000000000400000-0x0000000000676000-memory.dmp

      Filesize

      2.5MB

      Download