Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
900-58-0x00000000025E0000-0x0000000002614000-memory.dmp
-
Size
208KB
-
Sample
220916-179dracefm
-
MD5
ff4b420dff81cdff0af484101d7af8ce
-
SHA1
86a16b3a65bbb55a35479b4a420673488a8b2434
-
SHA256
523018aa64f485fae5ae5eaad0db05d212109d670e56997f8fc24fd849fb9fa5
-
SHA512
5ffe6d0bbf3f277f460d8b86e4cffb71a7170bb2fd503349ca1b52a97d60cff93312970c190e8249b88155a045558f09f355c03ca4b2d3c124dec14cadc150bf
-
SSDEEP
3072:WIgHUJvpRucoi3d/K+XwCjob8gaR20zgqC+hT0bAy:TcUfQi1K+Ag1W+hy
Behavioral task
behavioral1
Sample
900-58-0x00000000025E0000-0x0000000002614000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
900-58-0x00000000025E0000-0x0000000002614000-memory.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
redline
1masst55
163.172.13.142:35522
-
auth_value
d8a574cc8a68230ab3067ce3407c7b17
Targets
-
-
Target
900-58-0x00000000025E0000-0x0000000002614000-memory.dmp
-
Size
208KB
-
MD5
ff4b420dff81cdff0af484101d7af8ce
-
SHA1
86a16b3a65bbb55a35479b4a420673488a8b2434
-
SHA256
523018aa64f485fae5ae5eaad0db05d212109d670e56997f8fc24fd849fb9fa5
-
SHA512
5ffe6d0bbf3f277f460d8b86e4cffb71a7170bb2fd503349ca1b52a97d60cff93312970c190e8249b88155a045558f09f355c03ca4b2d3c124dec14cadc150bf
-
SSDEEP
3072:WIgHUJvpRucoi3d/K+XwCjob8gaR20zgqC+hT0bAy:TcUfQi1K+Ag1W+hy
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-