Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

URLScan

urlscan

1

http://147.182.180.7...

windows10-2004-x64

10

Resubmissions

25/04/2023, 21:52

230425-1q673ada87 6

24/04/2023, 07:06

230424-hw7rnsca7t 10

24/04/2023, 06:59

230424-hsa9asca5t 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    http://147.182.180.78:8081

  • Sample

    230424-hw7rnsca7t

Score
10/10
redlineinfostealer

Malware Config

Targets

    • Target

      http://147.182.180.78:8081

    Score
    10/10
    redlineinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks