Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

35c202bfe7...6f.exe

windows7-x64

7

35c202bfe7...6f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35c202bfe7f86976531ab2e87f23c7d1a66648af312db25d1fff4c97df26a06f

  • Size

    599KB

  • Sample

    230506-z6c4gsfe25

  • MD5

    80aeb93aa49ddc9b56bba4617dadfc7a

  • SHA1

    f2d03b1af84b222ced11c4d30583b56daccb03da

  • SHA256

    35c202bfe7f86976531ab2e87f23c7d1a66648af312db25d1fff4c97df26a06f

  • SHA512

    135db8784e39c33977006442776b7a906abba19f4755d18c7a990ca2cb52ce73393183babdf6c0d1e42fffc3f4cb63e59d92e1c025f8c39f5ebe99c99246c4b2

  • SSDEEP

    12288:RMrJy900pubB1HoX1IbSlGsgoT83Y69IBxF08sTXqSAvT:IyqBlgaGlwppGBxF08sTaSq

Score
10/10
redlineinfostealerpersistencestealer

Malware Config

Targets

    • Target

      35c202bfe7f86976531ab2e87f23c7d1a66648af312db25d1fff4c97df26a06f

    • Size

      599KB

    • MD5

      80aeb93aa49ddc9b56bba4617dadfc7a

    • SHA1

      f2d03b1af84b222ced11c4d30583b56daccb03da

    • SHA256

      35c202bfe7f86976531ab2e87f23c7d1a66648af312db25d1fff4c97df26a06f

    • SHA512

      135db8784e39c33977006442776b7a906abba19f4755d18c7a990ca2cb52ce73393183babdf6c0d1e42fffc3f4cb63e59d92e1c025f8c39f5ebe99c99246c4b2

    • SSDEEP

      12288:RMrJy900pubB1HoX1IbSlGsgoT83Y69IBxF08sTXqSAvT:IyqBlgaGlwppGBxF08sTaSq

    Score
    10/10
    persistenceredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks