Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
920550x00000000000F00000x.dmp
-
Size
4.5MB
-
Sample
230630-r6mzpade56
-
MD5
e6d6ddc8de48707baaa6770b34f65d3c
-
SHA1
7f0450fa767ffa70f5c2efb55ffe226118da777b
-
SHA256
34a0d01a7529c165f687651f12c4853155a5f0843b2af38f255ababedce72d7f
-
SHA512
7af08ec646e00785beb3ca2636c38b71ca654d84c5743f19abf86d2431517717286b6060063af3b8ca298ade8a357082680f344cfaa1e08ca0ee945530d5cbea
-
SSDEEP
49152:Y9KrUj8deYIP0UDHpYfeZjFbED5VExTUjBl+Tzl6n0AG7ZZSyoWei+sJ0UBMeX:YorUj8wYIP0UDJYfevpxABqH2lGX
Behavioral task
behavioral1
Sample
920550x00000000000F00000x.exe
Resource
win7-20230621-en
Malware Config
Extracted
redline
Z
n57b30a.info:81
-
auth_value
907a217c291f74c1a111fc9371fe2803
Targets
-
-
Target
920550x00000000000F00000x.dmp
-
Size
4.5MB
-
MD5
e6d6ddc8de48707baaa6770b34f65d3c
-
SHA1
7f0450fa767ffa70f5c2efb55ffe226118da777b
-
SHA256
34a0d01a7529c165f687651f12c4853155a5f0843b2af38f255ababedce72d7f
-
SHA512
7af08ec646e00785beb3ca2636c38b71ca654d84c5743f19abf86d2431517717286b6060063af3b8ca298ade8a357082680f344cfaa1e08ca0ee945530d5cbea
-
SSDEEP
49152:Y9KrUj8deYIP0UDHpYfeZjFbED5VExTUjBl+Tzl6n0AG7ZZSyoWei+sJ0UBMeX:YorUj8wYIP0UDJYfevpxABqH2lGX
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-