Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
dbcd4c0d9a3c24f55e90389f038bb75b433743c0cd57cd877f31c357d67b64a9.bin
-
Size
1.1MB
-
Sample
230501-xdgj4afd9s
-
MD5
5cf2288e956b2b813143b6b963ff1b1d
-
SHA1
cb31f0af350a7e8ca259f410ed8c20dd7a5b13e8
-
SHA256
dbcd4c0d9a3c24f55e90389f038bb75b433743c0cd57cd877f31c357d67b64a9
-
SHA512
4ac6b925e43c59b411b6fc3cfd1df3ba7882c370c20a6e00e4db1ed6d22cd64156674bf316aadc306d297b8705a2ba472fd62a567a558b7a689d37b151b19599
-
SSDEEP
24576:/ypMtpV4x/fy/b8XftHvBZcCTdBACKl3RqyuFpK3qaNecz5tO7yNhVIveS:/yWVk6/b8tH5ZrTxxyMp4VNr5hVge
Static task
static1
Behavioral task
behavioral1
Sample
dbcd4c0d9a3c24f55e90389f038bb75b433743c0cd57cd877f31c357d67b64a9.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
dbcd4c0d9a3c24f55e90389f038bb75b433743c0cd57cd877f31c357d67b64a9.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
dbcd4c0d9a3c24f55e90389f038bb75b433743c0cd57cd877f31c357d67b64a9.bin
-
Size
1.1MB
-
MD5
5cf2288e956b2b813143b6b963ff1b1d
-
SHA1
cb31f0af350a7e8ca259f410ed8c20dd7a5b13e8
-
SHA256
dbcd4c0d9a3c24f55e90389f038bb75b433743c0cd57cd877f31c357d67b64a9
-
SHA512
4ac6b925e43c59b411b6fc3cfd1df3ba7882c370c20a6e00e4db1ed6d22cd64156674bf316aadc306d297b8705a2ba472fd62a567a558b7a689d37b151b19599
-
SSDEEP
24576:/ypMtpV4x/fy/b8XftHvBZcCTdBACKl3RqyuFpK3qaNecz5tO7yNhVIveS:/yWVk6/b8tH5ZrTxxyMp4VNr5hVge
-
Detects Redline Stealer samples
This rule detects the presence of Redline Stealer samples based on their unique strings.
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-