Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    958774dd0c2c69136862ed2429db344da5be0722c7cf4f8c576ee27fa931ae0c

  • Size

    308KB

  • Sample

    230717-kbrwtsbe61

  • MD5

    0ef93fa303e9eb081e42fd672e9e4895

  • SHA1

    c9169a229006fa1676c4400cc811a2821f04e2fb

  • SHA256

    958774dd0c2c69136862ed2429db344da5be0722c7cf4f8c576ee27fa931ae0c

  • SHA512

    bc59aa34582e514b0055797d64527aac3fa26bb504c69af8823d045e8e068cc8a492c7a47e5644f485e743ee6c0f131c7d7096ceee06f483f8242bb506b4eb8e

  • SSDEEP

    3072:55xUppCRzzwQjiRb5welYpK23rlxteLX049hWa/dUBilHMOnwXQPq8Gxzn72989r:Tx7LjiRVwz8zrsBilHn27RV

Score
10/10
redlinekirainfostealer

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      958774dd0c2c69136862ed2429db344da5be0722c7cf4f8c576ee27fa931ae0c

    • Size

      308KB

    • MD5

      0ef93fa303e9eb081e42fd672e9e4895

    • SHA1

      c9169a229006fa1676c4400cc811a2821f04e2fb

    • SHA256

      958774dd0c2c69136862ed2429db344da5be0722c7cf4f8c576ee27fa931ae0c

    • SHA512

      bc59aa34582e514b0055797d64527aac3fa26bb504c69af8823d045e8e068cc8a492c7a47e5644f485e743ee6c0f131c7d7096ceee06f483f8242bb506b4eb8e

    • SSDEEP

      3072:55xUppCRzzwQjiRb5welYpK23rlxteLX049hWa/dUBilHMOnwXQPq8Gxzn72989r:Tx7LjiRVwz8zrsBilHn27RV

    Score
    10/10
    redlinekirainfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline
    behavioral1

MITRE ATT&CK Matrix

Tasks