Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0x00080000000133cd-78.dat
-
Size
172KB
-
Sample
230610-aw5cjsdg97
-
MD5
a59a242d0dbcdf13c197804479568c34
-
SHA1
43a5fa54d53307008e1e017e0e6316e2792cca5d
-
SHA256
c30ceb94deac28207dc6a20317ae97ecc85f673885adfa5784f2c36b682582e7
-
SHA512
f49a5ae6febf11ccbb201638b4a0d696a34c792f666d793033045a1c298cfa0c770682be2058afca58d333600245fa01dcb35e757104be5af578cead968a86a6
-
SSDEEP
3072:QUYvpRfFyNgq8oMGl9ixNcO3qdLbkSh8e8hb:kVoVrLbkSh
Behavioral task
behavioral1
Sample
0x00080000000133cd-78.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
duha
83.97.73.129:19068
-
auth_value
aafe99874c3b8854069470882e00246c
Targets
-
-
Target
0x00080000000133cd-78.dat
-
Size
172KB
-
MD5
a59a242d0dbcdf13c197804479568c34
-
SHA1
43a5fa54d53307008e1e017e0e6316e2792cca5d
-
SHA256
c30ceb94deac28207dc6a20317ae97ecc85f673885adfa5784f2c36b682582e7
-
SHA512
f49a5ae6febf11ccbb201638b4a0d696a34c792f666d793033045a1c298cfa0c770682be2058afca58d333600245fa01dcb35e757104be5af578cead968a86a6
-
SSDEEP
3072:QUYvpRfFyNgq8oMGl9ixNcO3qdLbkSh8e8hb:kVoVrLbkSh
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-