Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6094d7eff6f3e224d049d09ab4a981c76a12a83f17f8160d5a98b59144a790f4
-
Size
262KB
-
Sample
230607-q4mqgabc48
-
MD5
eaa803d067df55ec1c57f121c4e68b0a
-
SHA1
b9809943c5c81e5a51745db970ca3c9527f813ee
-
SHA256
6094d7eff6f3e224d049d09ab4a981c76a12a83f17f8160d5a98b59144a790f4
-
SHA512
e25cd012a6f61a543e7218a9d456c00c3641556e7311f3e50e04ac2b2caf817181998cdeb5ee40a933f9a2080ec5cd665c28ff96a3be29cef2c09932be670021
-
SSDEEP
3072:Ox/qx1OuyRyXFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2SUHcj/:a/qx1aEFaQ7W05AEezbMPZFzAy2Sc
Static task
static1
Behavioral task
behavioral1
Sample
6094d7eff6f3e224d049d09ab4a981c76a12a83f17f8160d5a98b59144a790f4.exe
Resource
win10-20230220-en
Malware Config
Extracted
redline
sheron
83.97.73.129:19068
-
auth_value
2d067e7e2372227d3a03b335260112e9
Targets
-
-
Target
6094d7eff6f3e224d049d09ab4a981c76a12a83f17f8160d5a98b59144a790f4
-
Size
262KB
-
MD5
eaa803d067df55ec1c57f121c4e68b0a
-
SHA1
b9809943c5c81e5a51745db970ca3c9527f813ee
-
SHA256
6094d7eff6f3e224d049d09ab4a981c76a12a83f17f8160d5a98b59144a790f4
-
SHA512
e25cd012a6f61a543e7218a9d456c00c3641556e7311f3e50e04ac2b2caf817181998cdeb5ee40a933f9a2080ec5cd665c28ff96a3be29cef2c09932be670021
-
SSDEEP
3072:Ox/qx1OuyRyXFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2SUHcj/:a/qx1aEFaQ7W05AEezbMPZFzAy2Sc
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext
-