Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2860-583-0...ry.exe

windows7-x64

1

2860-583-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2860-583-0x0000000000400000-0x0000000000676000-memory.dmp

  • Size

    2.5MB

  • MD5

    b24e8ed0f3c3eae72fb73828b8f1a117

  • SHA1

    f0831ae081288ae8d1e54ca7d7534998c59b4f9c

  • SHA256

    19cd36f8985460a5ca3b7938f66131ea3968ea1b51d6d3b0114932b44dcc4b03

  • SHA512

    fe9cf21ebcfa5213dfce29b41f22358f7dc34d23be50a831a6c0237b800effe0e18bc56f74551d36466331e5b06e76b7e42f7104003ab834f8458bf59b3b4f51

  • SSDEEP

    6144:5lqPvKpKJNJGyRlaw8aSp0Vbux0R4kF/Y/o8+:5mRJNMalaLaO0Ix6BY/s

Score
10/10
stealer8b4d47586874b08947203f03e4db3962vidar

Malware Config

Extracted

Family

vidar

Version

11

Botnet

8b4d47586874b08947203f03e4db3962

C2

https://steamcommunity.com/profiles/76561199780418869

https://t.me/ae5ed
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0

Signatures

  • Detect Vidar Stealer 1 IoCs
    stealer
  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2860-583-0x0000000000400000-0x0000000000676000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections