Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

06b0a1cbe3...39.exe

windows7-x64

10

06b0a1cbe3...39.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06b0a1cbe31aa08ff0b3d5e8306f855598943d30638db10d31a941dc04453839.bin

  • Size

    1.2MB

  • Sample

    230506-y3r8kadd7t

  • MD5

    c6834351cdceb83aefe8de469d3bb5e5

  • SHA1

    310e1870aa41a64bd95f86f5d4e9050ccf03d981

  • SHA256

    06b0a1cbe31aa08ff0b3d5e8306f855598943d30638db10d31a941dc04453839

  • SHA512

    2d6152f7e4f3c8e55f3a3beee6e959f2a6c1a0e016da46eafd366a4c937aae14007e5a24cd7b383ed0197256c8989be602d21db88066b4ffa70b51e05ff36de3

  • SSDEEP

    24576:hVQCVvyI/k4Zf9YMGp77zdd0ZKUNk9e0KUDsM1dpkJNK35m:hVtvhk499YMGVzddAge0KUDsiyNK

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      06b0a1cbe31aa08ff0b3d5e8306f855598943d30638db10d31a941dc04453839.bin

    • Size

      1.2MB

    • MD5

      c6834351cdceb83aefe8de469d3bb5e5

    • SHA1

      310e1870aa41a64bd95f86f5d4e9050ccf03d981

    • SHA256

      06b0a1cbe31aa08ff0b3d5e8306f855598943d30638db10d31a941dc04453839

    • SHA512

      2d6152f7e4f3c8e55f3a3beee6e959f2a6c1a0e016da46eafd366a4c937aae14007e5a24cd7b383ed0197256c8989be602d21db88066b4ffa70b51e05ff36de3

    • SSDEEP

      24576:hVQCVvyI/k4Zf9YMGp77zdd0ZKUNk9e0KUDsM1dpkJNK35m:hVtvhk499YMGVzddAge0KUDsiyNK

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks