Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

65e927b43a...b9.exe

windows7-x64

7

65e927b43a...b9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65e927b43ad5e5c9e01570c197da93530191b622d90abad16e486d69157942b9

  • Size

    599KB

  • Sample

    230506-17kemade2y

  • MD5

    9fcf210a9e62502d2332c6cf658b50d5

  • SHA1

    91ed85654df42d0f41c02cc344bac9f11c858f34

  • SHA256

    65e927b43ad5e5c9e01570c197da93530191b622d90abad16e486d69157942b9

  • SHA512

    ebbb43549280464616956cfa60d1755deeaf0918c46f1023f7c8c0105b1362b267b9190cb49eabadf9f04618d14d8a21cdb2810ffedbadfb33ecdf916146774c

  • SSDEEP

    12288:sMrSy90mYT6rZjgyo7HoX1Id3CWyEh62U2+6cWCLxCs88Zpg2FaUOZ/t:OymTmJyHgasPv2RwK2bO7

Score
10/10
redlineinfostealerpersistencestealer

Malware Config

Targets

    • Target

      65e927b43ad5e5c9e01570c197da93530191b622d90abad16e486d69157942b9

    • Size

      599KB

    • MD5

      9fcf210a9e62502d2332c6cf658b50d5

    • SHA1

      91ed85654df42d0f41c02cc344bac9f11c858f34

    • SHA256

      65e927b43ad5e5c9e01570c197da93530191b622d90abad16e486d69157942b9

    • SHA512

      ebbb43549280464616956cfa60d1755deeaf0918c46f1023f7c8c0105b1362b267b9190cb49eabadf9f04618d14d8a21cdb2810ffedbadfb33ecdf916146774c

    • SSDEEP

      12288:sMrSy90mYT6rZjgyo7HoX1Id3CWyEh62U2+6cWCLxCs88Zpg2FaUOZ/t:OymTmJyHgasPv2RwK2bO7

    Score
    10/10
    persistenceredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks