Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0x00070000000126ea-93.dat
-
Size
168KB
-
Sample
230603-c794aafc34
-
MD5
ace75a72494a28f28d9afcb4abfa5850
-
SHA1
bdf7ca7d65035f0783bcfe0b458ea7f0a00aa9b9
-
SHA256
c4cf8d30ce2ac343bcfe42f2c4cee915df8fea88d4b465ff208ee1e66443b5cf
-
SHA512
68f9b3c13c1f04f2b1ed100aa6072e72d6854c620ee2ce99353310bfc3133d8543e01dfa36a2eb1e591d8927cb45b109971c463ac6915efc8f1a12ea46cc74cf
-
SSDEEP
3072:NPAVVKve8WCXYFlqVsg4/ywuHx8nB8e8hE:ZAVV+rX0DZFuHx8nB
Behavioral task
behavioral1
Sample
0x00070000000126ea-93.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
lupa
83.97.73.126:19046
-
auth_value
6a764aa41830c77712442516d143bc9c
Targets
-
-
Target
0x00070000000126ea-93.dat
-
Size
168KB
-
MD5
ace75a72494a28f28d9afcb4abfa5850
-
SHA1
bdf7ca7d65035f0783bcfe0b458ea7f0a00aa9b9
-
SHA256
c4cf8d30ce2ac343bcfe42f2c4cee915df8fea88d4b465ff208ee1e66443b5cf
-
SHA512
68f9b3c13c1f04f2b1ed100aa6072e72d6854c620ee2ce99353310bfc3133d8543e01dfa36a2eb1e591d8927cb45b109971c463ac6915efc8f1a12ea46cc74cf
-
SSDEEP
3072:NPAVVKve8WCXYFlqVsg4/ywuHx8nB8e8hE:ZAVV+rX0DZFuHx8nB
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-