Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b1c7a9d74dc98fbbf44a6adcc0add334.exe
-
Size
585KB
-
Sample
230606-pwrh1seb7x
-
MD5
b1c7a9d74dc98fbbf44a6adcc0add334
-
SHA1
ed1b2232e8dc7fdd62d2abcc50889d8822c0e4e4
-
SHA256
7cdf557ac0b26ac8e5dbb41e16d6d6ea7e23d76ca8662aaf808e60e2c45f07c6
-
SHA512
8506765ac63e7766f4a0d51d17ba5df2aa48a70ad7260e9df84512b47e10a78a19803f52d3cf2e2910a328cfee546ab133fb274d375039a9232c6d593b3c04e4
-
SSDEEP
12288:fMr8y90tAsU3nol5LbwNhHhO54EirAI1dhKontSgt:ryoTn4HhO54rAaLKISgt
Static task
static1
Behavioral task
behavioral1
Sample
b1c7a9d74dc98fbbf44a6adcc0add334.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b1c7a9d74dc98fbbf44a6adcc0add334.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
diza
83.97.73.126:19048
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
b1c7a9d74dc98fbbf44a6adcc0add334.exe
-
Size
585KB
-
MD5
b1c7a9d74dc98fbbf44a6adcc0add334
-
SHA1
ed1b2232e8dc7fdd62d2abcc50889d8822c0e4e4
-
SHA256
7cdf557ac0b26ac8e5dbb41e16d6d6ea7e23d76ca8662aaf808e60e2c45f07c6
-
SHA512
8506765ac63e7766f4a0d51d17ba5df2aa48a70ad7260e9df84512b47e10a78a19803f52d3cf2e2910a328cfee546ab133fb274d375039a9232c6d593b3c04e4
-
SSDEEP
12288:fMr8y90tAsU3nol5LbwNhHhO54EirAI1dhKontSgt:ryoTn4HhO54rAaLKISgt
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-