Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
31s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
18/05/2023, 04:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
file.exe
-
Size
336KB
-
MD5
4b7666e1b42e9e474795036a20d2beda
-
SHA1
45beb04280b6d9000c7a405dc3cc0b8e51e01fe5
-
SHA256
0b031cc034caaa64b1c04af46f75ad0ef11927faebc4885f5f9b6712653d1232
-
SHA512
8003f59445c65375e3c40d64b990e57d41cec3f4758a759c8f311be98300e7530003f213ca52c3b049c1b5b017f8b0d5f54d5d10365603c546df364213df2c68
-
SSDEEP
6144:onduqGLv3mBX159q1bAQdMkq2wjcLKhOcydQMpUtQgmdU378:oduqGLuBF59UO9EcbMqtQgmGY
Score
10/10
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 2 IoCs
resource yara_rule behavioral1/memory/2000-55-0x00000000021F0000-0x000000000221E000-memory.dmp family_redline behavioral1/memory/2000-56-0x00000000022D0000-0x00000000022FC000-memory.dmp family_redline