Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

030a304705...5c.exe

windows7-x64

10

030a304705...5c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    030a3047053c0951c877033ae7b8394f8889052aa9564ebb65cbaa0b25e41f5c

  • Size

    694KB

  • Sample

    230506-2jv2wsdb74

  • MD5

    69d4160bbfefda8fd6481b25158fa7f4

  • SHA1

    e498f77d023c2ad95c050c1b90dc3026df5a716e

  • SHA256

    030a3047053c0951c877033ae7b8394f8889052aa9564ebb65cbaa0b25e41f5c

  • SHA512

    a67d52e85242a3049ff540542725795b8c393d69fb9747eee1bed85f3e6f57687305ebda71ee1c259c1729134f1e7c89b7fe2de824862cc5c19dc5297745f77e

  • SSDEEP

    12288:by905RiNpoEioZ6L6J4wpFTUirGfG5eWz6Fp18bSKlA+l+2l0834X:byCR8poey5oFLrGfK6Fp18bSqG2lve

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      030a3047053c0951c877033ae7b8394f8889052aa9564ebb65cbaa0b25e41f5c

    • Size

      694KB

    • MD5

      69d4160bbfefda8fd6481b25158fa7f4

    • SHA1

      e498f77d023c2ad95c050c1b90dc3026df5a716e

    • SHA256

      030a3047053c0951c877033ae7b8394f8889052aa9564ebb65cbaa0b25e41f5c

    • SHA512

      a67d52e85242a3049ff540542725795b8c393d69fb9747eee1bed85f3e6f57687305ebda71ee1c259c1729134f1e7c89b7fe2de824862cc5c19dc5297745f77e

    • SSDEEP

      12288:by905RiNpoEioZ6L6J4wpFTUirGfG5eWz6Fp18bSKlA+l+2l0834X:byCR8poey5oFLrGfK6Fp18bSqG2lve

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks