Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    45fdee6076799ce9ba8cb7c4e607bc802685c871ee3124d68fdcddb3f021ed1e.bin

  • Size

    651KB

  • Sample

    230506-1hmtfsgg98

  • MD5

    5bca55938216c45c17dfe520d3539716

  • SHA1

    3416b55d593b977ff499392b7527c95dddf18cb5

  • SHA256

    45fdee6076799ce9ba8cb7c4e607bc802685c871ee3124d68fdcddb3f021ed1e

  • SHA512

    8e46a8b26f54b97113bc70cc31ff5917822fcfdfe160a43c191143f384d52132e31235b92300cae3bf48fb0fcb1682389a380f39d2de516174e1d3ea489a4a2c

  • SSDEEP

    12288:ey90rDkzqvQivHtJhPKDF2J3WDC0xF72dmQinfCrVvVn:ey8DxVtJhPKD6Whx2d5infCrNp

Malware Config

Targets

    • Target

      45fdee6076799ce9ba8cb7c4e607bc802685c871ee3124d68fdcddb3f021ed1e.bin

    • Size

      651KB

    • MD5

      5bca55938216c45c17dfe520d3539716

    • SHA1

      3416b55d593b977ff499392b7527c95dddf18cb5

    • SHA256

      45fdee6076799ce9ba8cb7c4e607bc802685c871ee3124d68fdcddb3f021ed1e

    • SHA512

      8e46a8b26f54b97113bc70cc31ff5917822fcfdfe160a43c191143f384d52132e31235b92300cae3bf48fb0fcb1682389a380f39d2de516174e1d3ea489a4a2c

    • SSDEEP

      12288:ey90rDkzqvQivHtJhPKDF2J3WDC0xF72dmQinfCrVvVn:ey8DxVtJhPKD6Whx2d5infCrNp

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

    • Modifies Windows Defender Real-time Protection settings

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks