Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

434c0d1be9...98.exe

windows7-x64

10

434c0d1be9...98.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18e0a6a490d6fbdb80577c20c87c8895.bin

  • Size

    244KB

  • Sample

    230217-bc36tada35

  • MD5

    581bd71b9d9d063114a74f000eaec480

  • SHA1

    1c452a54f902def94e3044c2d3fdc0cb0604d813

  • SHA256

    95ea15a91ca88d30c0f2d2134a4aa24d69790da5a351bf1acf05a2396bd8365c

  • SHA512

    bc8c32a53a5d40437e316bfcfcf551de7b8bce3d9e22e18858cb69e23b2b40826f21004e20ca762c42f9a542e59c5dcbc7dcb6f31e60c7800238b0783f025f03

  • SSDEEP

    6144:7wQ9FfZxHJD8ndRw51wCH0GD0jeGTLFxoxul6W8Nh:rLt8dRw5XGje4LElW8v

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      434c0d1be9c104db80c459a84e2091a718f6b235f2b73b34a4ead2ca29485f98.exe

    • Size

      312KB

    • MD5

      18e0a6a490d6fbdb80577c20c87c8895

    • SHA1

      0d63c0190e9b592db82173b9460fe15096c16cfc

    • SHA256

      434c0d1be9c104db80c459a84e2091a718f6b235f2b73b34a4ead2ca29485f98

    • SHA512

      48daa00a1074bb5f34a22f24f4d65b15e9fc5274fd03cecd8644cfe14743b38b50b167bfd282f7a6a14650315a269c265298bae6895beb39637c542d7bf942d1

    • SSDEEP

      6144:MCx3UYxqA59zwqj/2f1kLkzdEZBUSQZqM/AqgKLtagRfeA2AbnG1Cs9mV9JjxsEW:MCAA7zwCqokZEZWNRtagRfeAVbG1C9Vy

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks