Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

pdf-reader...at.exe

windows7-x64

10

pdf-reader...at.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    pdf-reader-pdf.dat.exe

  • Size

    145KB

  • Sample

    230519-x6n5msad7x

  • MD5

    360d3b9932519696b953b53d0ba112f4

  • SHA1

    da8f264ec77c6fbdae360842296cfd70acb14189

  • SHA256

    0399314e439a67e303fa6a4490752339417577fbb30515879ce19e9efe7b92ca

  • SHA512

    340b0e5b4767da342f54284b85a3ada0c7078886baebd0ea83a8635cd258e45b1020b54b34cd8de46fa952c6432558345f13c77e9774b193e777b2ceffe31157

  • SSDEEP

    3072:FV+m5c/QmRSNAwMqLza9nDEFth2ZG8e8hR:Fj2FD0IQth2c

Score
10/10
redlinelunainfostealer

Malware Config

Extracted

Family

redline

Botnet

luna

C2

77.91.68.253:4138

Attributes
  • auth_value

    16dec8addb01db1c11c59667022ef7a2

Targets

    • Target

      pdf-reader-pdf.dat.exe

    • Size

      145KB

    • MD5

      360d3b9932519696b953b53d0ba112f4

    • SHA1

      da8f264ec77c6fbdae360842296cfd70acb14189

    • SHA256

      0399314e439a67e303fa6a4490752339417577fbb30515879ce19e9efe7b92ca

    • SHA512

      340b0e5b4767da342f54284b85a3ada0c7078886baebd0ea83a8635cd258e45b1020b54b34cd8de46fa952c6432558345f13c77e9774b193e777b2ceffe31157

    • SSDEEP

      3072:FV+m5c/QmRSNAwMqLza9nDEFth2ZG8e8hR:Fj2FD0IQth2c

    Score
    10/10
    redlinelunainfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks