Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a7eca25275744d972fd1ecdb8674cb63bbd5b9b0a1a14ac60dd1dbe151aa78f8
-
Size
390KB
-
Sample
230717-1gtwdaff8s
-
MD5
bf6fb48d8d2777e043fb95a8f5527fcf
-
SHA1
d531ccc2b95ae591bbbc9c7c16b74db2034fbcf3
-
SHA256
a7eca25275744d972fd1ecdb8674cb63bbd5b9b0a1a14ac60dd1dbe151aa78f8
-
SHA512
406767fcfeec8ac15fe6cefd48bd82247e309a44444494e77a524446a709fb5e86b873e7010a957e324b7e8ae489ee90d3353fdaf267ebb0e8a9f5a16bb784ca
-
SSDEEP
12288:tMrMy90IwwdyBghtsYYaecHnl9Do9QLUk/:BysxBSYaFHftLUO
Static task
static1
Behavioral task
behavioral1
Sample
a7eca25275744d972fd1ecdb8674cb63bbd5b9b0a1a14ac60dd1dbe151aa78f8.exe
Resource
win10-20230703-en
Malware Config
Extracted
amadey
3.85
77.91.68.3/home/love/index.php
Extracted
redline
roma
77.91.68.56:19071
-
auth_value
f099c2cf92834dbc554a94e1456cf576
Targets
-
-
Target
a7eca25275744d972fd1ecdb8674cb63bbd5b9b0a1a14ac60dd1dbe151aa78f8
-
Size
390KB
-
MD5
bf6fb48d8d2777e043fb95a8f5527fcf
-
SHA1
d531ccc2b95ae591bbbc9c7c16b74db2034fbcf3
-
SHA256
a7eca25275744d972fd1ecdb8674cb63bbd5b9b0a1a14ac60dd1dbe151aa78f8
-
SHA512
406767fcfeec8ac15fe6cefd48bd82247e309a44444494e77a524446a709fb5e86b873e7010a957e324b7e8ae489ee90d3353fdaf267ebb0e8a9f5a16bb784ca
-
SSDEEP
12288:tMrMy90IwwdyBghtsYYaecHnl9Do9QLUk/:BysxBSYaFHftLUO
-
Detects Healer an antivirus disabler dropper
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-