Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

0x00080000...07.exe

windows7-x64

10

0x00080000...07.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    143s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2023, 08:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0x000800000001231f-107.exe

  • Size

    172KB

  • MD5

    3f8bb47e4e3b0ee67699d04b409fb52c

  • SHA1

    3f5d4b92b9ba7bcc721b457205cfc5ffa37d74a6

  • SHA256

    b9eab12e5fd7694c8751bad39c6e7d79e7312c68aa6a8561084f72233f59afd7

  • SHA512

    7c08c39eeebc4f867b4ca1d89636f964d5ae33e25c80b4f24dae1e878878decaae4972674cf87200e0ea2984c19eff5d86a6b76a6c7292d22a2ff8b46d133364

  • SSDEEP

    1536:h5XZucNjBql36sv0W7T6Z9bHOrHbRxLvE9mBmjM1xNH1YQLzbusqxoqjOF0GkRqt:7XJWbuzo7L84mM1xN+iQOqjOFp8e8hK

Score
10/10
redlinedareinfostealer

Malware Config

Extracted

Family

redline

Botnet

dare

C2

83.97.73.129:19068

Attributes
  • auth_value

    cdee8b76b5a70827d5d5e110218c7d2f

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline
  • RedLine payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0x000800000001231f-107.exe
    "C:\Users\Admin\AppData\Local\Temp\0x000800000001231f-107.exe"
    1⤵
      PID:1556

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1556-54-0x0000000000EC0000-0x0000000000EF0000-memory.dmp

      Filesize

      192KB

      Download

    • memory/1556-55-0x0000000000410000-0x0000000000416000-memory.dmp

      Filesize

      24KB

      Download

    • memory/1556-56-0x0000000004860000-0x00000000048A0000-memory.dmp

      Filesize

      256KB

      Download