Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e2baa6d0d087ad7550517472f45f45f4be398772dfde4cd3902701e038a84fd8
-
Size
390KB
-
Sample
230720-c443vsch5s
-
MD5
8b5b6e35d1573db5283c5f0bb7465766
-
SHA1
b747658d92095898a3358a36a0c02b4576b558d3
-
SHA256
e2baa6d0d087ad7550517472f45f45f4be398772dfde4cd3902701e038a84fd8
-
SHA512
13888978fc1a2b20dedd4472b1861b9b273af23f2b8f4394d93dd2f583ec3c1a0379c5feb9a397047a95f5c4e9fe245e2aa6ee08a39df9cb212c33250446db17
-
SSDEEP
6144:KVy+bnr+mp0yN90QEWZ+H5legwQRFrNyXexjCcHnlRHmFqrCzS/2No4Z:/Mr+y90cZw5P72eMcHnl9S7BNo4Z
Static task
static1
Behavioral task
behavioral1
Sample
e2baa6d0d087ad7550517472f45f45f4be398772dfde4cd3902701e038a84fd8.exe
Resource
win10-20230703-en
Malware Config
Extracted
amadey
3.85
77.91.68.3/home/love/index.php
Extracted
redline
nasa
77.91.68.68:19071
-
auth_value
6da71218d8a9738ea3a9a78b5677589b
Targets
-
-
Target
e2baa6d0d087ad7550517472f45f45f4be398772dfde4cd3902701e038a84fd8
-
Size
390KB
-
MD5
8b5b6e35d1573db5283c5f0bb7465766
-
SHA1
b747658d92095898a3358a36a0c02b4576b558d3
-
SHA256
e2baa6d0d087ad7550517472f45f45f4be398772dfde4cd3902701e038a84fd8
-
SHA512
13888978fc1a2b20dedd4472b1861b9b273af23f2b8f4394d93dd2f583ec3c1a0379c5feb9a397047a95f5c4e9fe245e2aa6ee08a39df9cb212c33250446db17
-
SSDEEP
6144:KVy+bnr+mp0yN90QEWZ+H5legwQRFrNyXexjCcHnlRHmFqrCzS/2No4Z:/Mr+y90cZw5P72eMcHnl9S7BNo4Z
-
Detects Healer an antivirus disabler dropper
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-