Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b6ceea7ed883d89c2d2031181fbaa690402b2bf122c97a4ffb0e63ec52342938
-
Size
580KB
-
Sample
230604-1tz8xsed91
-
MD5
eb9e20eebbe1ae66dfa0bb1f6b013a28
-
SHA1
6885766558055686f09800f94cb02adc7ce131a1
-
SHA256
b6ceea7ed883d89c2d2031181fbaa690402b2bf122c97a4ffb0e63ec52342938
-
SHA512
81a211f5bac6b22ef382413bb97afbe878f55d8e8785810dd5d443fd5638af825c4d0b764c85d9ddab8bac026b56782af1a182dac8e05dbced437cef1afe607f
-
SSDEEP
12288:GMruy90Cy3TH3Q9u/rexAYqU1lwQEBJwAX6+/K+gU4yxLMe:MymjHA9uz/ol9AX6Y41e
Static task
static1
Behavioral task
behavioral1
Sample
b6ceea7ed883d89c2d2031181fbaa690402b2bf122c97a4ffb0e63ec52342938.exe
Resource
win10-20230220-en
Malware Config
Extracted
redline
diza
83.97.73.126:19046
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
b6ceea7ed883d89c2d2031181fbaa690402b2bf122c97a4ffb0e63ec52342938
-
Size
580KB
-
MD5
eb9e20eebbe1ae66dfa0bb1f6b013a28
-
SHA1
6885766558055686f09800f94cb02adc7ce131a1
-
SHA256
b6ceea7ed883d89c2d2031181fbaa690402b2bf122c97a4ffb0e63ec52342938
-
SHA512
81a211f5bac6b22ef382413bb97afbe878f55d8e8785810dd5d443fd5638af825c4d0b764c85d9ddab8bac026b56782af1a182dac8e05dbced437cef1afe607f
-
SSDEEP
12288:GMruy90Cy3TH3Q9u/rexAYqU1lwQEBJwAX6+/K+gU4yxLMe:MymjHA9uz/ol9AX6Y41e
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-