Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0029b23940e0cbbdacf0604c801d24624e82c96f9fbcf6d403a2c30f1b92deb0.bin
-
Size
561KB
-
Sample
230311-25stnabg57
-
MD5
83ec8c47401456f0671acc33a021b3d7
-
SHA1
5edfb84331bd873f5b75fb93ae7025632e92943a
-
SHA256
0029b23940e0cbbdacf0604c801d24624e82c96f9fbcf6d403a2c30f1b92deb0
-
SHA512
4123d99bd7f32714bfb9bd8df13d80f5ed2d05239ce20629eb0bf31eb6d15c8db019e9ddfa2f0f58ea6293e5b1664c67aec3da186a9a97db989d7d60316a87ac
-
SSDEEP
12288:aMrVy90cZlcEMRxq+MKiKgb7QCD4y9b2Su4ebvT3a1fCCpmGYIVq:jyx+7Rxq+MKvgb7QCDL9b2J4urK1fCCe
Static task
static1
Behavioral task
behavioral1
Sample
0029b23940e0cbbdacf0604c801d24624e82c96f9fbcf6d403a2c30f1b92deb0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0029b23940e0cbbdacf0604c801d24624e82c96f9fbcf6d403a2c30f1b92deb0.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
fud
193.233.20.27:4123
-
auth_value
cddc991efd6918ad5321d80dac884b40
Targets
-
-
Target
0029b23940e0cbbdacf0604c801d24624e82c96f9fbcf6d403a2c30f1b92deb0.bin
-
Size
561KB
-
MD5
83ec8c47401456f0671acc33a021b3d7
-
SHA1
5edfb84331bd873f5b75fb93ae7025632e92943a
-
SHA256
0029b23940e0cbbdacf0604c801d24624e82c96f9fbcf6d403a2c30f1b92deb0
-
SHA512
4123d99bd7f32714bfb9bd8df13d80f5ed2d05239ce20629eb0bf31eb6d15c8db019e9ddfa2f0f58ea6293e5b1664c67aec3da186a9a97db989d7d60316a87ac
-
SSDEEP
12288:aMrVy90cZlcEMRxq+MKiKgb7QCD4y9b2Su4ebvT3a1fCCpmGYIVq:jyx+7Rxq+MKvgb7QCDL9b2J4urK1fCCe
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-