Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a0c7b6c2f67ec7f2af88253d585ca89ecce7d15e67a3c8aee148a306d954b4d9
-
Size
1.1MB
-
Sample
230514-2x2rladh35
-
MD5
853ecd6b699d3bdef75ba5d943867379
-
SHA1
267dfac5f010530ae88d421e4f23966a7044f68c
-
SHA256
a0c7b6c2f67ec7f2af88253d585ca89ecce7d15e67a3c8aee148a306d954b4d9
-
SHA512
ba5f12e54312c2a381517053dd7c6a65c450a41ad1de4127ce0c294c427b43214f95d7481ec2d4e271aa4d025738f3567195bfd3bfe4dd2b7813044ac3f1e5df
-
SSDEEP
24576:JyZzafrCv2Qs8wOyukig0M1k+NcdjCxrgPKFSoK:8NwnQBwFudIrUCxrh8o
Static task
static1
Behavioral task
behavioral1
Sample
a0c7b6c2f67ec7f2af88253d585ca89ecce7d15e67a3c8aee148a306d954b4d9.exe
Resource
win10-20230220-en
Malware Config
Extracted
redline
linda
185.161.248.75:4132
-
auth_value
21cdc21d041667b9c1679f88a1146770
Targets
-
-
Target
a0c7b6c2f67ec7f2af88253d585ca89ecce7d15e67a3c8aee148a306d954b4d9
-
Size
1.1MB
-
MD5
853ecd6b699d3bdef75ba5d943867379
-
SHA1
267dfac5f010530ae88d421e4f23966a7044f68c
-
SHA256
a0c7b6c2f67ec7f2af88253d585ca89ecce7d15e67a3c8aee148a306d954b4d9
-
SHA512
ba5f12e54312c2a381517053dd7c6a65c450a41ad1de4127ce0c294c427b43214f95d7481ec2d4e271aa4d025738f3567195bfd3bfe4dd2b7813044ac3f1e5df
-
SSDEEP
24576:JyZzafrCv2Qs8wOyukig0M1k+NcdjCxrgPKFSoK:8NwnQBwFudIrUCxrh8o
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-