Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

1008-344-0...ry.exe

windows7-x64

10

1008-344-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1008-344-0x0000000003ED0000-0x0000000003F04000-memory.dmp

  • Size

    208KB

  • MD5

    d0c223a85fdf5c52d3a3a7c451e90741

  • SHA1

    2f481280310888382eb132bd7f96b072c0f96d1a

  • SHA256

    6c5e1143960c0c64977a0712115b5fad387e02612db4f8d21d1725fbfc977f2d

  • SHA512

    5aee0acb441b75264475bc298e937d021cffa6a4f7f5a292cc74c527b4df07b1ef706d98130b237e48498eae408919529f16ea225d68098cc217066815ee42de

  • SSDEEP

    3072:MW3s69VvJMzabHEt82BCHJam9UlCQXD/2brWI4+okzBby/8e8hgFGu:p3s6NMzaBJpK+brWIFdSr

Score
10/10
logsdiller cloud (tg: @logsdillabot)redline

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

51.89.201.49:6932

Attributes
  • auth_value

    3a050df92d0cf082b2cdaf87863616be

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1008-344-0x0000000003ED0000-0x0000000003F04000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.