Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

14f0e069ed...39.exe

windows7-x64

7

14f0e069ed...39.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14f0e069ed91dc3fb0ae9346321c4339.exe

  • Size

    376KB

  • Sample

    230506-zeeg8sef4t

  • MD5

    14f0e069ed91dc3fb0ae9346321c4339

  • SHA1

    371e99aae41a83b844601f3d6b1c9d0fef81096a

  • SHA256

    d213d41eec83394b49776b106eed246b7f7b8a460e195355122c2ed15df4de42

  • SHA512

    938d261e3f368888ad85c339981e564de83aa138210a622db052e3f569d7fa3c4d2e8382796b63a1fa36e0b61054c91ed8294c14ed20259eadc0cd2c4401e3be

  • SSDEEP

    6144:KCy+bnr+Vp0yN90QEsV3PthxfuUJNMk/+leNXZmO8HJshOsY59ks:OMr1y90+tvxpy0+lUXaDsYvks

Score
10/10
redlineinfostealerpersistencestealer

Malware Config

Targets

    • Target

      14f0e069ed91dc3fb0ae9346321c4339.exe

    • Size

      376KB

    • MD5

      14f0e069ed91dc3fb0ae9346321c4339

    • SHA1

      371e99aae41a83b844601f3d6b1c9d0fef81096a

    • SHA256

      d213d41eec83394b49776b106eed246b7f7b8a460e195355122c2ed15df4de42

    • SHA512

      938d261e3f368888ad85c339981e564de83aa138210a622db052e3f569d7fa3c4d2e8382796b63a1fa36e0b61054c91ed8294c14ed20259eadc0cd2c4401e3be

    • SSDEEP

      6144:KCy+bnr+Vp0yN90QEsV3PthxfuUJNMk/+leNXZmO8HJshOsY59ks:OMr1y90+tvxpy0+lUXaDsYvks

    Score
    10/10
    persistenceredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks