Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b60ed38b46f1bbf55ac1794bfd0e29197ff2eb2276016e24650ec90a40e82d4a.bin
-
Size
1.2MB
-
Sample
230505-xtsbjagb58
-
MD5
7c362a61abf91b8377a537ca6581b45c
-
SHA1
29acd4a52dd64326531cf3f844897c9e2fa03763
-
SHA256
b60ed38b46f1bbf55ac1794bfd0e29197ff2eb2276016e24650ec90a40e82d4a
-
SHA512
374f33bdf79d180dea14f82befdf9df1c81e5c3bce209c405ecd21b4382bfc0df744e0b34d7e7f17593cc8b2e0ca3a95adefe196e352b4a3e65dedf088d52e47
-
SSDEEP
24576:8cfsVIKzRLTr3vkFjAacR3lMERO6s0fYK++YSYuugo4cyC/:8c+I8X8FjAacEER9NYK+lngo4cyC
Static task
static1
Behavioral task
behavioral1
Sample
b60ed38b46f1bbf55ac1794bfd0e29197ff2eb2276016e24650ec90a40e82d4a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b60ed38b46f1bbf55ac1794bfd0e29197ff2eb2276016e24650ec90a40e82d4a.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
b60ed38b46f1bbf55ac1794bfd0e29197ff2eb2276016e24650ec90a40e82d4a.bin
-
Size
1.2MB
-
MD5
7c362a61abf91b8377a537ca6581b45c
-
SHA1
29acd4a52dd64326531cf3f844897c9e2fa03763
-
SHA256
b60ed38b46f1bbf55ac1794bfd0e29197ff2eb2276016e24650ec90a40e82d4a
-
SHA512
374f33bdf79d180dea14f82befdf9df1c81e5c3bce209c405ecd21b4382bfc0df744e0b34d7e7f17593cc8b2e0ca3a95adefe196e352b4a3e65dedf088d52e47
-
SSDEEP
24576:8cfsVIKzRLTr3vkFjAacR3lMERO6s0fYK++YSYuugo4cyC/:8c+I8X8FjAacEER9NYK+lngo4cyC
-
Detects Redline Stealer samples
This rule detects the presence of Redline Stealer samples based on their unique strings.
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-