Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3a624e7c7d5d4ef86bbf0e40b6e4312104ffb2e8c95c9c9e81999aaa89ca71ec
-
Size
2.5MB
-
Sample
221031-b52hpahhg2
-
MD5
1d59f656530b2d362f5d540122fb2d03
-
SHA1
c6af89f5402210c13ac67d4fc081b015a98c0959
-
SHA256
3a624e7c7d5d4ef86bbf0e40b6e4312104ffb2e8c95c9c9e81999aaa89ca71ec
-
SHA512
5065db582a0de1b319c25c67c40cfaff8a5240b4fc7f0dec9a7d1eac9ffaefef1f6923085a5ebcec07c91e3fdc7ff6e755847dc2e2bb27786477add0d8cf7094
-
SSDEEP
24576:SxHh9tivm4GY2YlYFBcFuDMGed39+aV0obd3Ve6hGpa3ibCtLHfs25dehl3RuQ5m:Sv9wvmmkJSd3gpuibCtTZdQl3U
Static task
static1
Behavioral task
behavioral1
Sample
3a624e7c7d5d4ef86bbf0e40b6e4312104ffb2e8c95c9c9e81999aaa89ca71ec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a624e7c7d5d4ef86bbf0e40b6e4312104ffb2e8c95c9c9e81999aaa89ca71ec.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
redline
45.150.108.67:80
-
auth_value
a0249d7bd1134f8f7f9d67e72afd4b00
Targets
-
-
Target
3a624e7c7d5d4ef86bbf0e40b6e4312104ffb2e8c95c9c9e81999aaa89ca71ec
-
Size
2.5MB
-
MD5
1d59f656530b2d362f5d540122fb2d03
-
SHA1
c6af89f5402210c13ac67d4fc081b015a98c0959
-
SHA256
3a624e7c7d5d4ef86bbf0e40b6e4312104ffb2e8c95c9c9e81999aaa89ca71ec
-
SHA512
5065db582a0de1b319c25c67c40cfaff8a5240b4fc7f0dec9a7d1eac9ffaefef1f6923085a5ebcec07c91e3fdc7ff6e755847dc2e2bb27786477add0d8cf7094
-
SSDEEP
24576:SxHh9tivm4GY2YlYFBcFuDMGed39+aV0obd3Ve6hGpa3ibCtLHfs25dehl3RuQ5m:Sv9wvmmkJSd3gpuibCtTZdQl3U
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext
-