Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
956-87-0x0000000002280000-0x00000000022C4000-memory.dmp
-
Size
272KB
-
Sample
230210-t4vb4aaf92
-
MD5
8be3cdd233f96ec68bb6849a90e9aab4
-
SHA1
1f997d4cb4e0062d4ed94bd84a68ac07ce09d1ff
-
SHA256
24165eb5354b6ca847a6c43fc08bfba5ee06257ea290f1a28b0b660f7a7df999
-
SHA512
b556e823d8943b68561ee1ba6d55c6cd17c8f8063dce8f1ce0c465185e988d49bbb2d3872755cea25230eadb5706ca6d39e3a4001c410ff220add6fd358c308a
-
SSDEEP
3072:R6j4ELN6FY9CYTk/XesXDCwrsmLoJNT4A1MiYo40KaFpsh0zniVavP6xNn2pU9fv:R6ji0Q/j+wzLoJNT5ME/sh8nN
Behavioral task
behavioral1
Sample
956-87-0x0000000002280000-0x00000000022C4000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
956-87-0x0000000002280000-0x00000000022C4000-memory.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
redline
romka
193.233.20.11:4131
-
auth_value
fcbb3247051f5290e8ac5b1a841af67b
Targets
-
-
Target
956-87-0x0000000002280000-0x00000000022C4000-memory.dmp
-
Size
272KB
-
MD5
8be3cdd233f96ec68bb6849a90e9aab4
-
SHA1
1f997d4cb4e0062d4ed94bd84a68ac07ce09d1ff
-
SHA256
24165eb5354b6ca847a6c43fc08bfba5ee06257ea290f1a28b0b660f7a7df999
-
SHA512
b556e823d8943b68561ee1ba6d55c6cd17c8f8063dce8f1ce0c465185e988d49bbb2d3872755cea25230eadb5706ca6d39e3a4001c410ff220add6fd358c308a
-
SSDEEP
3072:R6j4ELN6FY9CYTk/XesXDCwrsmLoJNT4A1MiYo40KaFpsh0zniVavP6xNn2pU9fv:R6ji0Q/j+wzLoJNT5ME/sh8nN
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-