Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2844-173-0...ry.exe

windows7-x64

2844-173-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2844-173-0x0000000003320000-0x0000000003561000-memory.dmp

  • Size

    2.3MB

  • MD5

    fc8975e4c15cc0fd001f9cfea71fd497

  • SHA1

    c6b522f0f745141c5e235ec7e7291e0abf0cb56d

  • SHA256

    780703c2fcfbaed2b8a285d899ceb4db3342125242bf3ab5b968d5a1310ea590

  • SHA512

    8067d6adf3abbb2a5169e51bf5b3f87dc975a1dd35c78cc59ac8f45b01f40fec6c1459d012ac183c9503e7478e7ac3cd2f240c8e61a62c418f1e1f7c933bd817

  • SSDEEP

    6144:Vub9iKk3lNqDI4HHswJYdUFiu/IVkp2FkhinkFKBJ+FZ0SQPoCNAuVQu0GM6FAPX:V0iKkjqtHM+iuwVRFnwhCwuO

Score
10/10
stealer057d037117dc13a05f53caea44d69e65vidar

Malware Config

Extracted

Family

vidar

Version

10.8

Botnet

057d037117dc13a05f53caea44d69e65

C2

https://steamcommunity.com/profiles/76561199761128941

https://t.me/iyigunl
Attributes
  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36

Signatures

  • Detect Vidar Stealer 1 IoCs
    stealer
  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2844-173-0x0000000003320000-0x0000000003561000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections