Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

c2348da208...68.exe

windows7-x64

10

c2348da208...68.exe

windows10-2004-x64

10

Resubmissions

22/03/2023, 20:41

230322-zgjjzabc24 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c2348da208353e096df8a9b8be2029c434959abdfb3a8fee2e82e5742b87de68.exe

  • Size

    298KB

  • Sample

    230322-zgjjzabc24

  • MD5

    c2d4b5490f3b41491624df1cd5a0ff62

  • SHA1

    bb86ae0caa8a21149a2fdce11ca05bc0ce950bbd

  • SHA256

    c2348da208353e096df8a9b8be2029c434959abdfb3a8fee2e82e5742b87de68

  • SHA512

    583b0dc713b35b39a6dda1314890299cf32f1bc70699927d59fdfae96e27c6283b6ee0a4294dc8fa6073cad8dc697e48851200b3f38603da510a876606f89ae6

  • SSDEEP

    6144:5HiCpw0G0c6sIxxmeY0yDmeMkonGV9XjdK6Igk6jsGLe63hs:5HiCVG0c6vPo0gLhV9lIgkC/L93

Score
10/10
redlinepersominfostealer

Malware Config

Extracted

Family

redline

Botnet

persom

C2

45.155.204.13:25916

Attributes
  • auth_value

    95b39b00ba8fba008cebd278bd0303f0

Targets

    • Target

      c2348da208353e096df8a9b8be2029c434959abdfb3a8fee2e82e5742b87de68.exe

    • Size

      298KB

    • MD5

      c2d4b5490f3b41491624df1cd5a0ff62

    • SHA1

      bb86ae0caa8a21149a2fdce11ca05bc0ce950bbd

    • SHA256

      c2348da208353e096df8a9b8be2029c434959abdfb3a8fee2e82e5742b87de68

    • SHA512

      583b0dc713b35b39a6dda1314890299cf32f1bc70699927d59fdfae96e27c6283b6ee0a4294dc8fa6073cad8dc697e48851200b3f38603da510a876606f89ae6

    • SSDEEP

      6144:5HiCpw0G0c6sIxxmeY0yDmeMkonGV9XjdK6Igk6jsGLe63hs:5HiCVG0c6vPo0gLhV9lIgkC/L93

    Score
    10/10
    redlinepersominfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks