Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
77cfdfc330a73a21a2e24498a7b44aa69597f4ef45ca470e68e654108acc2ff7
-
Size
701KB
-
Sample
230217-aqr52acg96
-
MD5
bfc20875ffe2530e5c8e4f56ecc7cb3d
-
SHA1
2ec991cd1c5ecb5836967927fa11271e21774611
-
SHA256
77cfdfc330a73a21a2e24498a7b44aa69597f4ef45ca470e68e654108acc2ff7
-
SHA512
a3cceaf968a73342307b7da8a81584e64fae6c2ac72d9c460c667fce6ab54ebe6c546f680923edeed306c9fe205f19c2ed27bbc657817cb6787d6c7a08003104
-
SSDEEP
12288:1MrNy90LkdvZ3o4yVTWhulzPMFrc1x/iSrdSvn9AgI35oa9fTYS8P:cyYkLoDFj2FrWieuymyTiP
Static task
static1
Behavioral task
behavioral1
Sample
77cfdfc330a73a21a2e24498a7b44aa69597f4ef45ca470e68e654108acc2ff7.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
redline
dubka
193.233.20.13:4136
-
auth_value
e5a9421183a033f283b2f23139b471f0
Extracted
redline
nock
176.113.115.17:4132
-
auth_value
f32d3c6ff0a9a7632c60a2b045a9cde6
Targets
-
-
Target
77cfdfc330a73a21a2e24498a7b44aa69597f4ef45ca470e68e654108acc2ff7
-
Size
701KB
-
MD5
bfc20875ffe2530e5c8e4f56ecc7cb3d
-
SHA1
2ec991cd1c5ecb5836967927fa11271e21774611
-
SHA256
77cfdfc330a73a21a2e24498a7b44aa69597f4ef45ca470e68e654108acc2ff7
-
SHA512
a3cceaf968a73342307b7da8a81584e64fae6c2ac72d9c460c667fce6ab54ebe6c546f680923edeed306c9fe205f19c2ed27bbc657817cb6787d6c7a08003104
-
SSDEEP
12288:1MrNy90LkdvZ3o4yVTWhulzPMFrc1x/iSrdSvn9AgI35oa9fTYS8P:cyYkLoDFj2FrWieuymyTiP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-