Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

06658d40bc...6b.exe

windows7-x64

10

06658d40bc...6b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06658d40bcfa5cd024bb666641ca7e85ef2f12dd8d79487947082e075a8c636b.bin

  • Size

    990KB

  • Sample

    230506-y3c4msdd4t

  • MD5

    12b115f455ebb8524e201c552a17d885

  • SHA1

    4cc463e3c321a6f5c8ce2582606d87d9c6e4f583

  • SHA256

    06658d40bcfa5cd024bb666641ca7e85ef2f12dd8d79487947082e075a8c636b

  • SHA512

    ac8d78acd401234cb8d826424321213583607ad952680cf1f9b3c0b2b81e5b7cdc62a66baeaf4670004171122eee9d8e4eb37e0b5d1a1ec9e74bea6c5a4c1f05

  • SSDEEP

    24576:QnUoY7pfy8Yg7Q7TsRZcKeD2Mzlnk+IY8Mlf:L7By87STskKefd5

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      06658d40bcfa5cd024bb666641ca7e85ef2f12dd8d79487947082e075a8c636b.bin

    • Size

      990KB

    • MD5

      12b115f455ebb8524e201c552a17d885

    • SHA1

      4cc463e3c321a6f5c8ce2582606d87d9c6e4f583

    • SHA256

      06658d40bcfa5cd024bb666641ca7e85ef2f12dd8d79487947082e075a8c636b

    • SHA512

      ac8d78acd401234cb8d826424321213583607ad952680cf1f9b3c0b2b81e5b7cdc62a66baeaf4670004171122eee9d8e4eb37e0b5d1a1ec9e74bea6c5a4c1f05

    • SSDEEP

      24576:QnUoY7pfy8Yg7Q7TsRZcKeD2Mzlnk+IY8Mlf:L7By87STskKefd5

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks