Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
08259899.exe
-
Size
585KB
-
Sample
230606-nt3mtsdd98
-
MD5
48fd57fde93bc3ea676506d9bc86ec90
-
SHA1
9768e0856cf7ce7b08609292dac2bc9546f70803
-
SHA256
e3420fc8be6b383d3c81fc05dea3d7243d88f8c58d946e120fc49115412017a2
-
SHA512
c65362f0cfbb7fcfd1ad6ded1bcd81ed215b6f9f785b5d90c40e6ef103f1063c2c944d413ca22361924e1b635eac95449123ea8e36f16ce0ae468c7602953ac3
-
SSDEEP
12288:lMrMy900rOFPjYRfLUWvxD/5D6pwIMbByl8V3oVpsFLJZy:xyhgYNLlF5D6poByNVpo7y
Static task
static1
Behavioral task
behavioral1
Sample
08259899.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
08259899.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
diza
83.97.73.126:19048
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
08259899.exe
-
Size
585KB
-
MD5
48fd57fde93bc3ea676506d9bc86ec90
-
SHA1
9768e0856cf7ce7b08609292dac2bc9546f70803
-
SHA256
e3420fc8be6b383d3c81fc05dea3d7243d88f8c58d946e120fc49115412017a2
-
SHA512
c65362f0cfbb7fcfd1ad6ded1bcd81ed215b6f9f785b5d90c40e6ef103f1063c2c944d413ca22361924e1b635eac95449123ea8e36f16ce0ae468c7602953ac3
-
SSDEEP
12288:lMrMy900rOFPjYRfLUWvxD/5D6pwIMbByl8V3oVpsFLJZy:xyhgYNLlF5D6poByNVpo7y
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-