Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

07163199.exe

windows7-x64

10

07163199.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07163199.exe

  • Size

    261KB

  • Sample

    230607-vcwlhsdb45

  • MD5

    9aeebc18f1f94729d2cbb12c27efdb00

  • SHA1

    d6e6698dde68c902f71d26033ff3153dfb5ba227

  • SHA256

    0c7ac8d42aeb07aeab60c7c95ee74e1b48b90256f1f7c496d8b5989c8e13d1eb

  • SHA512

    0b6ac76c7ac22d3951141dfcda083d6322bd102ad73e106c67c9b3a5e582400540addb6e50518a90f6703463f52700dd3279eaa8bb03a43eadd76a175af3b46e

  • SSDEEP

    3072:Hhg7X1JzemRyHFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2yQHcj/:Bg71JyFaQ7W05AEezbMPZFzAy2yA

Score
10/10
redlinesheroninfostealerspyware

Malware Config

Extracted

Family

redline

Botnet

sheron

C2

83.97.73.129:19068

Attributes
  • auth_value

    2d067e7e2372227d3a03b335260112e9

Targets

    • Target

      07163199.exe

    • Size

      261KB

    • MD5

      9aeebc18f1f94729d2cbb12c27efdb00

    • SHA1

      d6e6698dde68c902f71d26033ff3153dfb5ba227

    • SHA256

      0c7ac8d42aeb07aeab60c7c95ee74e1b48b90256f1f7c496d8b5989c8e13d1eb

    • SHA512

      0b6ac76c7ac22d3951141dfcda083d6322bd102ad73e106c67c9b3a5e582400540addb6e50518a90f6703463f52700dd3279eaa8bb03a43eadd76a175af3b46e

    • SSDEEP

      3072:Hhg7X1JzemRyHFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2yQHcj/:Bg71JyFaQ7W05AEezbMPZFzAy2yA

    Score
    10/10
    redlinesheroninfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks