Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

fe6450a225...2f.exe

windows7-x64

10

fe6450a225...2f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe6450a225302d7f9cab3ee73681548d9bf49e41bb42870ba21d374b04ef7e2f.bin

  • Size

    696KB

  • Sample

    230501-ybg9aahf7t

  • MD5

    1feca7be483a7ede6047b2021bba9291

  • SHA1

    232052904b9db804906180ccf2ba113a90eb89e6

  • SHA256

    fe6450a225302d7f9cab3ee73681548d9bf49e41bb42870ba21d374b04ef7e2f

  • SHA512

    1a32cb9bde9022d2554b276eee3b05bc523d276f4dfd1a40df7b073f6adceb43418fada2ac18228acb13beaa336ce22a149da7f0edf850ab08b7de36133eb8d8

  • SSDEEP

    12288:zy90Tq4C00Xa9KJ2A/+tZ9CO3IhMY/NN4MWL6+718buKjA+KQujtlU:zyyqsfKoA/+tXCFneZ6+718bugIbjtlU

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      fe6450a225302d7f9cab3ee73681548d9bf49e41bb42870ba21d374b04ef7e2f.bin

    • Size

      696KB

    • MD5

      1feca7be483a7ede6047b2021bba9291

    • SHA1

      232052904b9db804906180ccf2ba113a90eb89e6

    • SHA256

      fe6450a225302d7f9cab3ee73681548d9bf49e41bb42870ba21d374b04ef7e2f

    • SHA512

      1a32cb9bde9022d2554b276eee3b05bc523d276f4dfd1a40df7b073f6adceb43418fada2ac18228acb13beaa336ce22a149da7f0edf850ab08b7de36133eb8d8

    • SSDEEP

      12288:zy90Tq4C00Xa9KJ2A/+tZ9CO3IhMY/NN4MWL6+718buKjA+KQujtlU:zyyqsfKoA/+tXCFneZ6+718bugIbjtlU

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks