Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ed662f9cd920e2dd3183fba80198ec1f050187deb00e43f7059ab9214b6c7dbd
-
Size
479KB
-
Sample
230508-3a44wafa4z
-
MD5
acd593c59f0853ca0f2c5f61ec4100ff
-
SHA1
df9475b4307fecc62218b1a107c6ff35e4f497ab
-
SHA256
ed662f9cd920e2dd3183fba80198ec1f050187deb00e43f7059ab9214b6c7dbd
-
SHA512
bfce640b4c28febd6c859e3653298bf4db72f05f3f2431c9e4ae69e226e3cfaca9c77a5d239576363a2254397a66081c97f85b736f2ac2141b12fb45af45431a
-
SSDEEP
12288:nMr9y90PO5CFlJpdYP5c1u31kT+NwzaoVf3PnCPNfS9H1:OyVCFzQXKTawzaIPCtS9H1
Static task
static1
Behavioral task
behavioral1
Sample
ed662f9cd920e2dd3183fba80198ec1f050187deb00e43f7059ab9214b6c7dbd.exe
Resource
win10-20230220-en
Malware Config
Extracted
redline
dumud
217.196.96.101:4132
-
auth_value
3e18d4b90418aa3e78d8822e87c62f5c
Targets
-
-
Target
ed662f9cd920e2dd3183fba80198ec1f050187deb00e43f7059ab9214b6c7dbd
-
Size
479KB
-
MD5
acd593c59f0853ca0f2c5f61ec4100ff
-
SHA1
df9475b4307fecc62218b1a107c6ff35e4f497ab
-
SHA256
ed662f9cd920e2dd3183fba80198ec1f050187deb00e43f7059ab9214b6c7dbd
-
SHA512
bfce640b4c28febd6c859e3653298bf4db72f05f3f2431c9e4ae69e226e3cfaca9c77a5d239576363a2254397a66081c97f85b736f2ac2141b12fb45af45431a
-
SSDEEP
12288:nMr9y90PO5CFlJpdYP5c1u31kT+NwzaoVf3PnCPNfS9H1:OyVCFzQXKTawzaIPCtS9H1
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-