Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ee15e18baf8d9726fab400c01b678c47cd0c02c04f857eec8f58bc4d7daf248a
-
Size
292KB
-
Sample
230327-17q76she7t
-
MD5
65a08ffc4bdb323b6899ae9737f747f6
-
SHA1
6a7fa5c964ab7548ce8492d3374bc346dbf13839
-
SHA256
ee15e18baf8d9726fab400c01b678c47cd0c02c04f857eec8f58bc4d7daf248a
-
SHA512
ea5443621fdc13634b0503aa830eba4a6c612ce772da25f005e14e9e6671324b1a0b0f026c136ffc1a04e11028646245d6d28b3d171c06416af0d66fba544b40
-
SSDEEP
6144:JZ5UN3ALaT+qAvDwgCzJ5vIwjs5WIQuqg:JXUN3ALaxAaLjAQ
Static task
static1
Behavioral task
behavioral1
Sample
ee15e18baf8d9726fab400c01b678c47cd0c02c04f857eec8f58bc4d7daf248a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ee15e18baf8d9726fab400c01b678c47cd0c02c04f857eec8f58bc4d7daf248a.exe
Resource
win10-20230220-en
Malware Config
Extracted
redline
135.181.173.163:4323
-
auth_value
a909e2aaecf96137978fea4f86400b9b
Targets
-
-
Target
ee15e18baf8d9726fab400c01b678c47cd0c02c04f857eec8f58bc4d7daf248a
-
Size
292KB
-
MD5
65a08ffc4bdb323b6899ae9737f747f6
-
SHA1
6a7fa5c964ab7548ce8492d3374bc346dbf13839
-
SHA256
ee15e18baf8d9726fab400c01b678c47cd0c02c04f857eec8f58bc4d7daf248a
-
SHA512
ea5443621fdc13634b0503aa830eba4a6c612ce772da25f005e14e9e6671324b1a0b0f026c136ffc1a04e11028646245d6d28b3d171c06416af0d66fba544b40
-
SSDEEP
6144:JZ5UN3ALaT+qAvDwgCzJ5vIwjs5WIQuqg:JXUN3ALaxAaLjAQ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext
-