Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
l8412641.exe
-
Size
145KB
-
Sample
230513-3ndh3saa52
-
MD5
6d029ca6ce5f44e188b0f6d0f5f98bb6
-
SHA1
bdb651303a34389914c2756fbaa220eff01c7ebb
-
SHA256
a504755e40c94c02829bc90ebd97cf20afb802f223a88fcea9b32bddee5d7c76
-
SHA512
1e22e2c25056d76a1c47a6ea2e7a16448d01dcc0312362b73b3f09e16ddd9608ee1369302e7251049d81c8ae8cf1ec5b29f432c22c7d09c2ddc4a86a610ffc8e
-
SSDEEP
3072:AV+m5cVQmRSxAX9GYM1vYWr9h/Z28e8hq:Aj4Zyz9h/M
Behavioral task
behavioral1
Sample
l8412641.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
dogma
185.161.248.75:4132
-
auth_value
d6c5d36e9aa03c956dc76aa0fcbe3639
Targets
-
-
Target
l8412641.exe
-
Size
145KB
-
MD5
6d029ca6ce5f44e188b0f6d0f5f98bb6
-
SHA1
bdb651303a34389914c2756fbaa220eff01c7ebb
-
SHA256
a504755e40c94c02829bc90ebd97cf20afb802f223a88fcea9b32bddee5d7c76
-
SHA512
1e22e2c25056d76a1c47a6ea2e7a16448d01dcc0312362b73b3f09e16ddd9608ee1369302e7251049d81c8ae8cf1ec5b29f432c22c7d09c2ddc4a86a610ffc8e
-
SSDEEP
3072:AV+m5cVQmRSxAX9GYM1vYWr9h/Z28e8hq:Aj4Zyz9h/M
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-