Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
cf15e03819f999cb739fd15b63fcb37300219ee34266913cc01037d772dd7715
-
Size
282KB
-
Sample
230608-fpjp6ach31
-
MD5
988c37fe4121e769689aac4bce9daa7f
-
SHA1
16601c9643864162bb526cfcb07a89301add7d08
-
SHA256
cf15e03819f999cb739fd15b63fcb37300219ee34266913cc01037d772dd7715
-
SHA512
39627841e10bf6f978448ca5fbeab96a8ab7229a4b0b2568e944c9266f4621f90c0e818fba5eea864742eef5f9f9bcae7f3df3e16a58601c1d512053a54f033b
-
SSDEEP
6144:eQvoWvJakXxwvTygXUNVS4MGh1aBFrvz1xcxcWhUrt:eUTuyR1aBFrvz1xcxdUrt
Static task
static1
Behavioral task
behavioral1
Sample
cf15e03819f999cb739fd15b63fcb37300219ee34266913cc01037d772dd7715.exe
Resource
win10v2004-20230221-en
Malware Config
Extracted
redline
sheron
83.97.73.129:19068
-
auth_value
2d067e7e2372227d3a03b335260112e9
Targets
-
-
Target
cf15e03819f999cb739fd15b63fcb37300219ee34266913cc01037d772dd7715
-
Size
282KB
-
MD5
988c37fe4121e769689aac4bce9daa7f
-
SHA1
16601c9643864162bb526cfcb07a89301add7d08
-
SHA256
cf15e03819f999cb739fd15b63fcb37300219ee34266913cc01037d772dd7715
-
SHA512
39627841e10bf6f978448ca5fbeab96a8ab7229a4b0b2568e944c9266f4621f90c0e818fba5eea864742eef5f9f9bcae7f3df3e16a58601c1d512053a54f033b
-
SSDEEP
6144:eQvoWvJakXxwvTygXUNVS4MGh1aBFrvz1xcxcWhUrt:eUTuyR1aBFrvz1xcxdUrt
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-