Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c7151e5f16475a88c5532339250f116c68c52125a535923054ab09b73adddf59
-
Size
536KB
-
Sample
230301-zqf57shg2x
-
MD5
4826cd54b93b76f7f367fe5060ad2244
-
SHA1
97ebcd743fc3de014682e27f6c40d104f7d96afb
-
SHA256
c7151e5f16475a88c5532339250f116c68c52125a535923054ab09b73adddf59
-
SHA512
93613a97c7cabd320aea773b61304ba50a37809f1cc6810f5206cd6f983b72051f1b59a0d061154a325f3bd06882a0629de1042ce9fb6500ac09774c554ea40f
-
SSDEEP
12288:PMrGy9090mNEQ/4JrVmKWXei7a402BYmPyDpb:tyBmF6EKWXei7a4nZa9
Static task
static1
Behavioral task
behavioral1
Sample
c7151e5f16475a88c5532339250f116c68c52125a535923054ab09b73adddf59.exe
Resource
win10-20230220-en
Malware Config
Extracted
redline
rouch
193.56.146.11:4162
-
auth_value
1b1735bcfc122c708eae27ca352568de
Extracted
redline
fuba
193.56.146.11:4162
-
auth_value
43015841fc23c63b15ca6ffe1d278d5e
Targets
-
-
Target
c7151e5f16475a88c5532339250f116c68c52125a535923054ab09b73adddf59
-
Size
536KB
-
MD5
4826cd54b93b76f7f367fe5060ad2244
-
SHA1
97ebcd743fc3de014682e27f6c40d104f7d96afb
-
SHA256
c7151e5f16475a88c5532339250f116c68c52125a535923054ab09b73adddf59
-
SHA512
93613a97c7cabd320aea773b61304ba50a37809f1cc6810f5206cd6f983b72051f1b59a0d061154a325f3bd06882a0629de1042ce9fb6500ac09774c554ea40f
-
SSDEEP
12288:PMrGy9090mNEQ/4JrVmKWXei7a402BYmPyDpb:tyBmF6EKWXei7a4nZa9
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-