Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

b6e77228f2...15.exe

windows7-x64

7

b6e77228f2...15.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6e77228f25d120c044ccbf73fd5241da3bf5d98df3de4e4b275f2d316800115.bin

  • Size

    353KB

  • Sample

    230505-xva4msgc23

  • MD5

    dcacdfbf2f39c53b8482125a3bf0939f

  • SHA1

    f0df4b22d00eb1f52d0b9884e4cde7666fbd42b2

  • SHA256

    b6e77228f25d120c044ccbf73fd5241da3bf5d98df3de4e4b275f2d316800115

  • SHA512

    993ed36a1f073159375718cdd45a7e735e28bc44d7cdc50569fb20ed289378be5262177ed49db324cbd95d0f54b7c840cd24df214fc603f2a6b5c9c723147888

  • SSDEEP

    6144:ZLEO+eKhW0XySuWd201gF0Rc5Ka4lIymT7abTDL66QN:ZJzMCSnV1gF0Rc5Ka4C/T2bTDe3N

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      b6e77228f25d120c044ccbf73fd5241da3bf5d98df3de4e4b275f2d316800115.bin

    • Size

      353KB

    • MD5

      dcacdfbf2f39c53b8482125a3bf0939f

    • SHA1

      f0df4b22d00eb1f52d0b9884e4cde7666fbd42b2

    • SHA256

      b6e77228f25d120c044ccbf73fd5241da3bf5d98df3de4e4b275f2d316800115

    • SHA512

      993ed36a1f073159375718cdd45a7e735e28bc44d7cdc50569fb20ed289378be5262177ed49db324cbd95d0f54b7c840cd24df214fc603f2a6b5c9c723147888

    • SSDEEP

      6144:ZLEO+eKhW0XySuWd201gF0Rc5Ka4lIymT7abTDL66QN:ZJzMCSnV1gF0Rc5Ka4C/T2bTDe3N

    Score
    10/10
    discoveryspywarestealerredlineinfostealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks