Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a5eb2f0b1ca214b4979f1ab80afdb234fd2a5250dcbaaf5945cf7e58be787dd4.bin
-
Size
674KB
-
Sample
230505-xgv7naha4v
-
MD5
57010affc0dc3cfded0cb04b499857ca
-
SHA1
7bc7c28e0dca80c0f33274d05b710be6e19b0d99
-
SHA256
a5eb2f0b1ca214b4979f1ab80afdb234fd2a5250dcbaaf5945cf7e58be787dd4
-
SHA512
b6a367528798a1c04b530bf936e1b144b867cd1ef237effd9c12275fcfc3bac7fbacd6fdfc34804ba9a0a950df69abd505fe09cffe28cd51b6c63b2ee15fea12
-
SSDEEP
12288:oy90FtWi7tJaPcMaF+9rfq3f5P9fBPVtWDyVjqGOtzI:oystWi7tJaPmkS3fh9LtkyIlI
Static task
static1
Behavioral task
behavioral1
Sample
a5eb2f0b1ca214b4979f1ab80afdb234fd2a5250dcbaaf5945cf7e58be787dd4.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a5eb2f0b1ca214b4979f1ab80afdb234fd2a5250dcbaaf5945cf7e58be787dd4.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
a5eb2f0b1ca214b4979f1ab80afdb234fd2a5250dcbaaf5945cf7e58be787dd4.bin
-
Size
674KB
-
MD5
57010affc0dc3cfded0cb04b499857ca
-
SHA1
7bc7c28e0dca80c0f33274d05b710be6e19b0d99
-
SHA256
a5eb2f0b1ca214b4979f1ab80afdb234fd2a5250dcbaaf5945cf7e58be787dd4
-
SHA512
b6a367528798a1c04b530bf936e1b144b867cd1ef237effd9c12275fcfc3bac7fbacd6fdfc34804ba9a0a950df69abd505fe09cffe28cd51b6c63b2ee15fea12
-
SSDEEP
12288:oy90FtWi7tJaPcMaF+9rfq3f5P9fBPVtWDyVjqGOtzI:oystWi7tJaPmkS3fh9LtkyIlI
-
Detects Redline Stealer samples
This rule detects the presence of Redline Stealer samples based on their unique strings.
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-