Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
65e927b43ad5e5c9e01570c197da93530191b622d90abad16e486d69157942b9
-
Size
599KB
-
Sample
230506-17kemade2y
-
MD5
9fcf210a9e62502d2332c6cf658b50d5
-
SHA1
91ed85654df42d0f41c02cc344bac9f11c858f34
-
SHA256
65e927b43ad5e5c9e01570c197da93530191b622d90abad16e486d69157942b9
-
SHA512
ebbb43549280464616956cfa60d1755deeaf0918c46f1023f7c8c0105b1362b267b9190cb49eabadf9f04618d14d8a21cdb2810ffedbadfb33ecdf916146774c
-
SSDEEP
12288:sMrSy90mYT6rZjgyo7HoX1Id3CWyEh62U2+6cWCLxCs88Zpg2FaUOZ/t:OymTmJyHgasPv2RwK2bO7
Static task
static1
Behavioral task
behavioral1
Sample
65e927b43ad5e5c9e01570c197da93530191b622d90abad16e486d69157942b9.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
65e927b43ad5e5c9e01570c197da93530191b622d90abad16e486d69157942b9.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
65e927b43ad5e5c9e01570c197da93530191b622d90abad16e486d69157942b9
-
Size
599KB
-
MD5
9fcf210a9e62502d2332c6cf658b50d5
-
SHA1
91ed85654df42d0f41c02cc344bac9f11c858f34
-
SHA256
65e927b43ad5e5c9e01570c197da93530191b622d90abad16e486d69157942b9
-
SHA512
ebbb43549280464616956cfa60d1755deeaf0918c46f1023f7c8c0105b1362b267b9190cb49eabadf9f04618d14d8a21cdb2810ffedbadfb33ecdf916146774c
-
SSDEEP
12288:sMrSy90mYT6rZjgyo7HoX1Id3CWyEh62U2+6cWCLxCs88Zpg2FaUOZ/t:OymTmJyHgasPv2RwK2bO7
Score10/10-
Detects Redline Stealer samples
This rule detects the presence of Redline Stealer samples based on their unique strings.
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-