Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

3226e97b5a...1f.exe

windows7-x64

10

3226e97b5a...1f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3226e97b5a6b050c4909fbb6cdd3bcb2b500a7fbb639fceaad64f5261b8f6d1f.bin

  • Size

    1.2MB

  • Sample

    230506-z3ne2sfb43

  • MD5

    ee2b7b8c32688ed9eab339a9313e26b6

  • SHA1

    abeb7e155cfd94eb4e7726491e78126725542b40

  • SHA256

    3226e97b5a6b050c4909fbb6cdd3bcb2b500a7fbb639fceaad64f5261b8f6d1f

  • SHA512

    b018cf3f6629cdb2825976ab067db783da8ac2cd0911280d2d961b88b8b007353111e2e47ecb7c6540d2130f115a9d8372cbaadf1aad3571b863da0481809f07

  • SSDEEP

    24576:1Cbht9y/vN4jFVkUI4Hiew2ltipvLt87VLLLVxCwaUdw578ObN/4SYrnP4uO:1Cz9uyy4Hrw2lt2CxxCwbdw57fQSG

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      3226e97b5a6b050c4909fbb6cdd3bcb2b500a7fbb639fceaad64f5261b8f6d1f.bin

    • Size

      1.2MB

    • MD5

      ee2b7b8c32688ed9eab339a9313e26b6

    • SHA1

      abeb7e155cfd94eb4e7726491e78126725542b40

    • SHA256

      3226e97b5a6b050c4909fbb6cdd3bcb2b500a7fbb639fceaad64f5261b8f6d1f

    • SHA512

      b018cf3f6629cdb2825976ab067db783da8ac2cd0911280d2d961b88b8b007353111e2e47ecb7c6540d2130f115a9d8372cbaadf1aad3571b863da0481809f07

    • SSDEEP

      24576:1Cbht9y/vN4jFVkUI4Hiew2ltipvLt87VLLLVxCwaUdw578ObN/4SYrnP4uO:1Cz9uyy4Hrw2lt2CxxCwbdw57fQSG

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks