Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
7bb0c8f7ad2f5519b34da2d3df4fc65ce690b1825d6fc5706716ebf5ea5bf5a3
-
Size
292KB
-
Sample
230327-17e5xahe6y
-
MD5
172402b1322ff83dfcc705a38ec79b25
-
SHA1
936f59fa30cb210ef20ed3d03e07761ffe3c9039
-
SHA256
7bb0c8f7ad2f5519b34da2d3df4fc65ce690b1825d6fc5706716ebf5ea5bf5a3
-
SHA512
18c48d1388f379aa272108e10d285250b651bcbdd9f97a5339ba88845fcf8e06541f3c52c0c4427b751d849fe920461f1aac891cfa786700e296305c5364520d
-
SSDEEP
6144:JFdYUN3ALaW+qAvDwgvoR8s5ziPKiHrrqg:JHYUN3ALa+AqWPVH
Static task
static1
Behavioral task
behavioral1
Sample
7bb0c8f7ad2f5519b34da2d3df4fc65ce690b1825d6fc5706716ebf5ea5bf5a3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7bb0c8f7ad2f5519b34da2d3df4fc65ce690b1825d6fc5706716ebf5ea5bf5a3.exe
Resource
win10-20230220-en
Malware Config
Extracted
redline
135.181.173.163:4323
-
auth_value
a909e2aaecf96137978fea4f86400b9b
Targets
-
-
Target
7bb0c8f7ad2f5519b34da2d3df4fc65ce690b1825d6fc5706716ebf5ea5bf5a3
-
Size
292KB
-
MD5
172402b1322ff83dfcc705a38ec79b25
-
SHA1
936f59fa30cb210ef20ed3d03e07761ffe3c9039
-
SHA256
7bb0c8f7ad2f5519b34da2d3df4fc65ce690b1825d6fc5706716ebf5ea5bf5a3
-
SHA512
18c48d1388f379aa272108e10d285250b651bcbdd9f97a5339ba88845fcf8e06541f3c52c0c4427b751d849fe920461f1aac891cfa786700e296305c5364520d
-
SSDEEP
6144:JFdYUN3ALaW+qAvDwgvoR8s5ziPKiHrrqg:JHYUN3ALa+AqWPVH
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext
-