Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4c58c170fa0cf2f099d788ea28007200530b48a7ce5ce9a0ebf8fa7a3a45ae86.bin
-
Size
1.2MB
-
Sample
230506-1ne1sshd33
-
MD5
c4484a13ebfe6c2faa5a247b7b1131fe
-
SHA1
44efe8c17b5b3701038f16cc86fd32380e888883
-
SHA256
4c58c170fa0cf2f099d788ea28007200530b48a7ce5ce9a0ebf8fa7a3a45ae86
-
SHA512
9eda3a0b7703b2ac6d0a9832daa5a697a58d1d3185cea1a299a449f91448779a2b3b3022c6225395d82f80fdf8703f3c30051489453be62cb6292e23fcbb8327
-
SSDEEP
24576:xVQCVvyI/k4Zf9YMGp77zdd0ZKUNk9e0KUDsM1dpkJNK35m:xVtvhk499YMGVzddAge0KUDsiyNK
Static task
static1
Behavioral task
behavioral1
Sample
4c58c170fa0cf2f099d788ea28007200530b48a7ce5ce9a0ebf8fa7a3a45ae86.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4c58c170fa0cf2f099d788ea28007200530b48a7ce5ce9a0ebf8fa7a3a45ae86.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
4c58c170fa0cf2f099d788ea28007200530b48a7ce5ce9a0ebf8fa7a3a45ae86.bin
-
Size
1.2MB
-
MD5
c4484a13ebfe6c2faa5a247b7b1131fe
-
SHA1
44efe8c17b5b3701038f16cc86fd32380e888883
-
SHA256
4c58c170fa0cf2f099d788ea28007200530b48a7ce5ce9a0ebf8fa7a3a45ae86
-
SHA512
9eda3a0b7703b2ac6d0a9832daa5a697a58d1d3185cea1a299a449f91448779a2b3b3022c6225395d82f80fdf8703f3c30051489453be62cb6292e23fcbb8327
-
SSDEEP
24576:xVQCVvyI/k4Zf9YMGp77zdd0ZKUNk9e0KUDsM1dpkJNK35m:xVtvhk499YMGVzddAge0KUDsiyNK
-
Detects Redline Stealer samples
This rule detects the presence of Redline Stealer samples based on their unique strings.
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-