Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

installer.dll.exe

windows7-x64

10

installer.dll.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    installer.dll.exe

  • Size

    145KB

  • Sample

    230517-ncf3hadg9t

  • MD5

    4dee5bdc1962224f97e75924a18f12c4

  • SHA1

    23d10bf29715387bd73768150c73f06f8333ba85

  • SHA256

    069a392ce4f1c94e5cd81cd02143d83d35130a079a8df8a3112b13efaf4c664a

  • SHA512

    7009c7f1475e9512dde5ee5afa38e92852fd774c0c7b957c651335f0b75b7a03d83e493dc9a429058a0b42f53b929f1d972115725a710f483ab8c552aae17134

  • SSDEEP

    3072:4V+m5cvQmRSNP3qemJ7BvoOJ0hyZ98e8hm:4jGqMd0hyX

Score
10/10
redlinedusorinfostealer

Malware Config

Extracted

Family

redline

Botnet

dusor

C2

185.161.248.25:4132

Attributes
  • auth_value

    b81217cf5a516122d407aeaf79d22948

Targets

    • Target

      installer.dll.exe

    • Size

      145KB

    • MD5

      4dee5bdc1962224f97e75924a18f12c4

    • SHA1

      23d10bf29715387bd73768150c73f06f8333ba85

    • SHA256

      069a392ce4f1c94e5cd81cd02143d83d35130a079a8df8a3112b13efaf4c664a

    • SHA512

      7009c7f1475e9512dde5ee5afa38e92852fd774c0c7b957c651335f0b75b7a03d83e493dc9a429058a0b42f53b929f1d972115725a710f483ab8c552aae17134

    • SSDEEP

      3072:4V+m5cvQmRSNP3qemJ7BvoOJ0hyZ98e8hm:4jGqMd0hyX

    Score
    10/10
    redlinedusorinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks