Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
65a178d5ff4859722fe43967d45cef45e6429fc837198d1d1f80f99d251323cb.bin
-
Size
1.3MB
-
Sample
230506-17dxvabf78
-
MD5
c6cd6a73797583cef39bbbde2ff87430
-
SHA1
10b265ac2919db493bd91877fa473d9a4edac6fa
-
SHA256
65a178d5ff4859722fe43967d45cef45e6429fc837198d1d1f80f99d251323cb
-
SHA512
7e29431070520fbf6670d3caf5ec06cbc1f07415cb31dca33fccd8000a440bb45cf62493bea7747aace996948cbcb99ad72a90d9c2675b22018a59502d6af11d
-
SSDEEP
24576:KOR69vbjPC6E/ejiI631d0ALtKexAQGCFs/y6aHW+uiwEfxaQ+1NG/GtS:KOObbE2ji/1KC8ip5aQcI+t
Static task
static1
Behavioral task
behavioral1
Sample
65a178d5ff4859722fe43967d45cef45e6429fc837198d1d1f80f99d251323cb.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
65a178d5ff4859722fe43967d45cef45e6429fc837198d1d1f80f99d251323cb.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
65a178d5ff4859722fe43967d45cef45e6429fc837198d1d1f80f99d251323cb.bin
-
Size
1.3MB
-
MD5
c6cd6a73797583cef39bbbde2ff87430
-
SHA1
10b265ac2919db493bd91877fa473d9a4edac6fa
-
SHA256
65a178d5ff4859722fe43967d45cef45e6429fc837198d1d1f80f99d251323cb
-
SHA512
7e29431070520fbf6670d3caf5ec06cbc1f07415cb31dca33fccd8000a440bb45cf62493bea7747aace996948cbcb99ad72a90d9c2675b22018a59502d6af11d
-
SSDEEP
24576:KOR69vbjPC6E/ejiI631d0ALtKexAQGCFs/y6aHW+uiwEfxaQ+1NG/GtS:KOObbE2ji/1KC8ip5aQcI+t
-
Detects Redline Stealer samples
This rule detects the presence of Redline Stealer samples based on their unique strings.
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-