Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
27fd659fbc1904b41272d38292b63b77dc9cb1a6d88faa28e9379e65119c904a
-
Size
389KB
-
Sample
230724-llngtscc75
-
MD5
b2799287cfedbb9141cabb47206b64ec
-
SHA1
9e337efc00b7c92fef424b5e36fbb8c804393fc7
-
SHA256
27fd659fbc1904b41272d38292b63b77dc9cb1a6d88faa28e9379e65119c904a
-
SHA512
3b2935b90da370c6c86df48bbb5c060f7ab6b405ca42d204345dd5186f06fa2061e19954ca520c5f04d7af857330e9ed5796f4449b51feb1b4354eeb40108075
-
SSDEEP
6144:Key+bnr+dp0yN90QEdYBIz2fnK7UothnvMLGtBDfI/6lS/lERyZw:qMrRy90PUU2fKVtp6/65RyG
Static task
static1
Behavioral task
behavioral1
Sample
27fd659fbc1904b41272d38292b63b77dc9cb1a6d88faa28e9379e65119c904a.exe
Resource
win10-20230703-en
Malware Config
Extracted
amadey
3.85
77.91.68.3/home/love/index.php
Extracted
redline
news
77.91.68.68:19071
-
auth_value
99ba2ffe8d72ebe9fdc7e758c94db148
Targets
-
-
Target
27fd659fbc1904b41272d38292b63b77dc9cb1a6d88faa28e9379e65119c904a
-
Size
389KB
-
MD5
b2799287cfedbb9141cabb47206b64ec
-
SHA1
9e337efc00b7c92fef424b5e36fbb8c804393fc7
-
SHA256
27fd659fbc1904b41272d38292b63b77dc9cb1a6d88faa28e9379e65119c904a
-
SHA512
3b2935b90da370c6c86df48bbb5c060f7ab6b405ca42d204345dd5186f06fa2061e19954ca520c5f04d7af857330e9ed5796f4449b51feb1b4354eeb40108075
-
SSDEEP
6144:Key+bnr+dp0yN90QEdYBIz2fnK7UothnvMLGtBDfI/6lS/lERyZw:qMrRy90PUU2fKVtp6/65RyG
-
Detects Healer an antivirus disabler dropper
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1