Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Roblox Cheat Free.rar

  • Size

    1.6MB

  • Sample

    241124-ya273a1phr

  • MD5

    4ba1bd42e77a2370c240d08e568efc72

  • SHA1

    b1d86361ed425fcf70e77f23d90867d87f1a7353

  • SHA256

    81e9674a18dcb4fad7e6314b353b71de92f04116438b950fdf177a1b0c5f1525

  • SHA512

    3482b3fb9c78958e482aa2115e661f7128b9bf9ea492d488810cb40d929f3a3e8ef6ee4e4ca94546afe8bd4be83ddd759aa743ba612abd4347e489eed8fa67d0

  • SSDEEP

    49152:mwnklGp051IOBaI8QTkH/oXeUC3A4Z4gzk9JOw:mCAGpDOAI8QTu/rLwG4Yw

Malware Config

Extracted

Family

vidar

Version

11.7

Botnet

a17f83dafa130de24986f1ad305270d5

C2

https://t.me/m07mbk

https://steamcommunity.com/profiles/76561199801589826

Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6

Targets

    • Target

      Roblox Cheat Free.rar

    • Size

      1.6MB

    • MD5

      4ba1bd42e77a2370c240d08e568efc72

    • SHA1

      b1d86361ed425fcf70e77f23d90867d87f1a7353

    • SHA256

      81e9674a18dcb4fad7e6314b353b71de92f04116438b950fdf177a1b0c5f1525

    • SHA512

      3482b3fb9c78958e482aa2115e661f7128b9bf9ea492d488810cb40d929f3a3e8ef6ee4e4ca94546afe8bd4be83ddd759aa743ba612abd4347e489eed8fa67d0

    • SSDEEP

      49152:mwnklGp051IOBaI8QTkH/oXeUC3A4Z4gzk9JOw:mCAGpDOAI8QTu/rLwG4Yw

    • Detect Vidar Stealer

    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Vidar family

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.