Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
7f621df3e586f4c326de9dbd340f0a8a49788c97418c02310c1bf350b326a521
-
Size
770KB
-
Sample
230528-hbh8kseh7s
-
MD5
c96792a42c482f95f89ae0cdbe374da1
-
SHA1
e08bd3c718a9e0695a4517c482337a787b79e046
-
SHA256
7f621df3e586f4c326de9dbd340f0a8a49788c97418c02310c1bf350b326a521
-
SHA512
83c55d635a5e918cfbef05a25147cee21f51d735d448661e5f5a8dd9dc4ee23efa56a27c004b22ee5c112b6b58bf7ec53462eb0447bacdd5a58881ac873f258c
-
SSDEEP
24576:py6ggijNuG2V1NZBoeRk33vQO4dDmUYfI3:ceV1NZGUOfQO4X
Static task
static1
Behavioral task
behavioral1
Sample
7f621df3e586f4c326de9dbd340f0a8a49788c97418c02310c1bf350b326a521.exe
Resource
win10-20230220-en
Malware Config
Extracted
redline
dura
83.97.73.127:19062
-
auth_value
44b7d6fb9572dea0d64d018139c3d208
Extracted
redline
heroy
83.97.73.127:19062
-
auth_value
b2879468e50d2d36e66f1a067d4a8bb3
Targets
-
-
Target
7f621df3e586f4c326de9dbd340f0a8a49788c97418c02310c1bf350b326a521
-
Size
770KB
-
MD5
c96792a42c482f95f89ae0cdbe374da1
-
SHA1
e08bd3c718a9e0695a4517c482337a787b79e046
-
SHA256
7f621df3e586f4c326de9dbd340f0a8a49788c97418c02310c1bf350b326a521
-
SHA512
83c55d635a5e918cfbef05a25147cee21f51d735d448661e5f5a8dd9dc4ee23efa56a27c004b22ee5c112b6b58bf7ec53462eb0447bacdd5a58881ac873f258c
-
SSDEEP
24576:py6ggijNuG2V1NZBoeRk33vQO4dDmUYfI3:ceV1NZGUOfQO4X
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-