Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ce7e7a2fa5c896adb619898290dab367e34fcffceaa332f5810ceaaa7570c76d
-
Size
779KB
-
Sample
230321-cwpcfaae2t
-
MD5
4159476f24ce734df27a92464189dd1c
-
SHA1
79c42b1b72cc772c8a073044acfd72c5eaff8ac2
-
SHA256
ce7e7a2fa5c896adb619898290dab367e34fcffceaa332f5810ceaaa7570c76d
-
SHA512
459223b02069de1693422726f5ffd665aa089cee3813b11cc150de5df2dfd9fd4d42896dd36af4d7fdb19c79ae11a6b06f8f443ae2381b72bed79d0143cdb3ac
-
SSDEEP
12288:vMr3y90/V6fE6iJs2irY1oju4F3YNc6ppAxfdBLk2H8z014Z79pcygN+dtWHf:My9E6JrYGjpCf3AxfdBLk+4h92
Static task
static1
Behavioral task
behavioral1
Sample
ce7e7a2fa5c896adb619898290dab367e34fcffceaa332f5810ceaaa7570c76d.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
relon
193.233.20.30:4125
-
auth_value
17da69809725577b595e217ba006b869
Targets
-
-
Target
ce7e7a2fa5c896adb619898290dab367e34fcffceaa332f5810ceaaa7570c76d
-
Size
779KB
-
MD5
4159476f24ce734df27a92464189dd1c
-
SHA1
79c42b1b72cc772c8a073044acfd72c5eaff8ac2
-
SHA256
ce7e7a2fa5c896adb619898290dab367e34fcffceaa332f5810ceaaa7570c76d
-
SHA512
459223b02069de1693422726f5ffd665aa089cee3813b11cc150de5df2dfd9fd4d42896dd36af4d7fdb19c79ae11a6b06f8f443ae2381b72bed79d0143cdb3ac
-
SSDEEP
12288:vMr3y90/V6fE6iJs2irY1oju4F3YNc6ppAxfdBLk2H8z014Z79pcygN+dtWHf:My9E6JrYGjpCf3AxfdBLk+4h92
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-