Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
244163bdb73c1bc3be9a992f09a92cce2554c2fb9e62b58c90f5e279a138c5e2
-
Size
282KB
-
Sample
230607-1lvy8sgg7y
-
MD5
ee5b693dbc49300422cd09d53418a86f
-
SHA1
b036b20edf60a1cddde54260dbbd1e1f627ca38d
-
SHA256
244163bdb73c1bc3be9a992f09a92cce2554c2fb9e62b58c90f5e279a138c5e2
-
SHA512
2980e292d91634505bd07f7a13e71a34a9f119680ef9b60a68c55d8f4e4acedd5ac688bae6a1db0ff7cfe3661842d60d1b73405fb57aed73618b5575a49f8cda
-
SSDEEP
6144:hQvoWvJfO6/ywvTygXUNVS4MGh1aBFrvz1xcxcWhqrt:hUdRyR1aBFrvz1xcxdqrt
Static task
static1
Behavioral task
behavioral1
Sample
244163bdb73c1bc3be9a992f09a92cce2554c2fb9e62b58c90f5e279a138c5e2.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
sheron
83.97.73.129:19068
-
auth_value
2d067e7e2372227d3a03b335260112e9
Targets
-
-
Target
244163bdb73c1bc3be9a992f09a92cce2554c2fb9e62b58c90f5e279a138c5e2
-
Size
282KB
-
MD5
ee5b693dbc49300422cd09d53418a86f
-
SHA1
b036b20edf60a1cddde54260dbbd1e1f627ca38d
-
SHA256
244163bdb73c1bc3be9a992f09a92cce2554c2fb9e62b58c90f5e279a138c5e2
-
SHA512
2980e292d91634505bd07f7a13e71a34a9f119680ef9b60a68c55d8f4e4acedd5ac688bae6a1db0ff7cfe3661842d60d1b73405fb57aed73618b5575a49f8cda
-
SSDEEP
6144:hQvoWvJfO6/ywvTygXUNVS4MGh1aBFrvz1xcxcWhqrt:hUdRyR1aBFrvz1xcxdqrt
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-