Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    267035c3a21b7aae7d7c5195c8a0e98545dc41c9afbef13ddfdcae4ea54d124c

  • Size

    480KB

  • Sample

    230506-zvgbrseb66

  • MD5

    cdd49f7c55deb6e3045d8b21f553355e

  • SHA1

    1e687544faec4c012890819ec79b40e35c77658d

  • SHA256

    267035c3a21b7aae7d7c5195c8a0e98545dc41c9afbef13ddfdcae4ea54d124c

  • SHA512

    a97d83197df9c941821f168ef1bfdfc4909d87f354e195244a716caa27e9a3942017697da43d40b97dd6f5d6f8359269e718fb23c6488c3d3693ba8fd9f587df

  • SSDEEP

    12288:IMrAy90j4U1KCAedvJJgOU1exiMWe1k7FyluF:IyHMdhxU18DS9

Malware Config

Targets

    • Target

      267035c3a21b7aae7d7c5195c8a0e98545dc41c9afbef13ddfdcae4ea54d124c

    • Size

      480KB

    • MD5

      cdd49f7c55deb6e3045d8b21f553355e

    • SHA1

      1e687544faec4c012890819ec79b40e35c77658d

    • SHA256

      267035c3a21b7aae7d7c5195c8a0e98545dc41c9afbef13ddfdcae4ea54d124c

    • SHA512

      a97d83197df9c941821f168ef1bfdfc4909d87f354e195244a716caa27e9a3942017697da43d40b97dd6f5d6f8359269e718fb23c6488c3d3693ba8fd9f587df

    • SSDEEP

      12288:IMrAy90j4U1KCAedvJJgOU1exiMWe1k7FyluF:IyHMdhxU18DS9

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

    • Modifies Windows Defender Real-time Protection settings

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks