Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...67.exe

windows7-x64

10

JaffaCakes...67.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_eda0aac74fa14c6d5985edae700aead2bda36103f7a24a85e702bfea2d397467

  • Size

    726.3MB

  • Sample

    241222-pze96ayqcp

  • MD5

    cd88d8bb8ad8c114bb278c82f9e5ec18

  • SHA1

    88c5b2bafd99546024936679107cf7e5b0e5c69a

  • SHA256

    eda0aac74fa14c6d5985edae700aead2bda36103f7a24a85e702bfea2d397467

  • SHA512

    69bfcc61f469750fe5aaa344ae942c65b5cc45745ae26dfce2634fc7e3919f8f7feabaf34b6cdfa024fb6b54abdfbee25a5b72fc0ac59bc52804a60bd2cb552d

  • SSDEEP

    196608:MQQSEK9rjor2aQEk07VAvAbcFYsEWUoYvC5:3QSxjofckkYsH+K5

Score
10/10
vidar670discoverystealer

Malware Config

Extracted

Family

vidar

Version

1.7

Botnet

670

C2

https://t.me/robloxblackl

https://steamcommunity.com/profiles/76561199458928097

http://135.181.204.67:80
Attributes
  • profile_id

    670

Targets

    • Target

      JaffaCakes118_eda0aac74fa14c6d5985edae700aead2bda36103f7a24a85e702bfea2d397467

    • Size

      726.3MB

    • MD5

      cd88d8bb8ad8c114bb278c82f9e5ec18

    • SHA1

      88c5b2bafd99546024936679107cf7e5b0e5c69a

    • SHA256

      eda0aac74fa14c6d5985edae700aead2bda36103f7a24a85e702bfea2d397467

    • SHA512

      69bfcc61f469750fe5aaa344ae942c65b5cc45745ae26dfce2634fc7e3919f8f7feabaf34b6cdfa024fb6b54abdfbee25a5b72fc0ac59bc52804a60bd2cb552d

    • SSDEEP

      196608:MQQSEK9rjor2aQEk07VAvAbcFYsEWUoYvC5:3QSxjofckkYsH+K5

    Score
    10/10
    vidar670discoverystealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar family

      vidar

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks