Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
7fbdc1b6e92a12b8a36118ca129b2fd15b7298bd5f0724eaf133579f2eb4ce94
-
Size
515KB
-
Sample
230719-r5fh8agh68
-
MD5
7383ad896936e2994d0d201636801ab0
-
SHA1
3389f90b8ed09a21db019717ade6faeb136903b3
-
SHA256
7fbdc1b6e92a12b8a36118ca129b2fd15b7298bd5f0724eaf133579f2eb4ce94
-
SHA512
66757e51a559c5c792971eb318e61788ccde1af9fa9bc75a296698fdb257dec88f1c174fec38a605d65c593f117ec45a65f02c011799f11e407f7a6ea587e8e0
-
SSDEEP
12288:ZMrPy90jv3EZq/gtu+Pj35vuToQd1E4+/uuZacaHGO:Oy2EZDtu+Pjpvu8B7acamO
Static task
static1
Behavioral task
behavioral1
Sample
7fbdc1b6e92a12b8a36118ca129b2fd15b7298bd5f0724eaf133579f2eb4ce94.exe
Resource
win10-20230703-en
Malware Config
Extracted
amadey
3.85
77.91.68.3/home/love/index.php
Extracted
smokeloader
2022
http://77.91.68.29/fks/
Extracted
redline
nasa
77.91.68.68:19071
-
auth_value
6da71218d8a9738ea3a9a78b5677589b
Targets
-
-
Target
7fbdc1b6e92a12b8a36118ca129b2fd15b7298bd5f0724eaf133579f2eb4ce94
-
Size
515KB
-
MD5
7383ad896936e2994d0d201636801ab0
-
SHA1
3389f90b8ed09a21db019717ade6faeb136903b3
-
SHA256
7fbdc1b6e92a12b8a36118ca129b2fd15b7298bd5f0724eaf133579f2eb4ce94
-
SHA512
66757e51a559c5c792971eb318e61788ccde1af9fa9bc75a296698fdb257dec88f1c174fec38a605d65c593f117ec45a65f02c011799f11e407f7a6ea587e8e0
-
SSDEEP
12288:ZMrPy90jv3EZq/gtu+Pj35vuToQd1E4+/uuZacaHGO:Oy2EZDtu+Pjpvu8B7acamO
-
Detects Healer an antivirus disabler dropper
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-