Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e6604b62a1...38.exe

windows7-x64

10

e6604b62a1...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e6604b62a1ef728f5e19137eac424db10b5392b82798991a79101a48dc780f38.bin

  • Size

    694KB

  • Sample

    230505-yzj3saca75

  • MD5

    323bf2284b64ea6435a12f51e09d57ea

  • SHA1

    944ffac2f8a682ea209d3d4f48e6a7379cf36fc9

  • SHA256

    e6604b62a1ef728f5e19137eac424db10b5392b82798991a79101a48dc780f38

  • SHA512

    f08b599e19aabc4f6c47f6e860866b36136ce4a4bab291a178794b52ef36bd2c384d34073a8b6dcfbba1b4a660ecec129b505d992384d79bab78e80d8a4127b5

  • SSDEEP

    12288:Uy90diNrF0XOt6eRlanHwpFT4WcIePBy+DPuWA6Fl18byKrA+FB1:Uy5NrFccjCHoFRcIeJk6Fl18byUf

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      e6604b62a1ef728f5e19137eac424db10b5392b82798991a79101a48dc780f38.bin

    • Size

      694KB

    • MD5

      323bf2284b64ea6435a12f51e09d57ea

    • SHA1

      944ffac2f8a682ea209d3d4f48e6a7379cf36fc9

    • SHA256

      e6604b62a1ef728f5e19137eac424db10b5392b82798991a79101a48dc780f38

    • SHA512

      f08b599e19aabc4f6c47f6e860866b36136ce4a4bab291a178794b52ef36bd2c384d34073a8b6dcfbba1b4a660ecec129b505d992384d79bab78e80d8a4127b5

    • SSDEEP

      12288:Uy90diNrF0XOt6eRlanHwpFT4WcIePBy+DPuWA6Fl18byKrA+FB1:Uy5NrFccjCHoFRcIeJk6Fl18byUf

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks