Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
98s -
max time network
103s -
platform
windows10-1703_x64 -
resource
win10-20230703-en -
resource tags
-
submitted
15/08/2023, 06:05
General
-
Target
e04fa0e503137dfc2219c5c2e0f8644ab236a002d665ca3fb297428548d4580f.exe
-
Size
338KB
-
MD5
d637248c2a60ab76b9100534c2d3c1ff
-
SHA1
54b15fcc5ea9b50c7a26e74aa6a7bd8b75cefba4
-
SHA256
e04fa0e503137dfc2219c5c2e0f8644ab236a002d665ca3fb297428548d4580f
-
SHA512
bfb51a5f05beb0d0f0e1b7606a05f5d5c25aabd5984efd03aac108194edb75b620dfe1f25e54e2b70b941cb2e2aa28dc2397256796f97ae27d72e6ef20ab5cce
-
SSDEEP
6144:2GvtXLe2pK+6lTgqxI1/sHymR1b28+hmndP:289q20+KT74eN1bj
Malware Config
Extracted
redline
LogsDiller Cloud (TG: @logsdillabot)
51.83.170.21:19447
-
auth_value
3a050df92d0cf082b2cdaf87863616be
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e04fa0e503137dfc2219c5c2e0f8644ab236a002d665ca3fb297428548d4580f.exe"C:\Users\Admin\AppData\Local\Temp\e04fa0e503137dfc2219c5c2e0f8644ab236a002d665ca3fb297428548d4580f.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
252KB
-
Filesize
164KB
-
Filesize
20.8MB
-
Filesize
224KB
-
Filesize
6.9MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
5.0MB
-
Filesize
208KB
-
Filesize
24KB
-
Filesize
6.0MB
-
Filesize
1.0MB
-
Filesize
64KB
-
Filesize
72KB
-
Filesize
248KB
-
Filesize
300KB
-
Filesize
164KB
-
Filesize
20.8MB
-
Filesize
252KB
-
Filesize
6.9MB
-
Filesize
472KB
-
Filesize
584KB
-
Filesize
408KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
1.8MB
-
Filesize
5.2MB
-
Filesize
64KB
-
Filesize
320KB
-
Filesize
64KB
-
Filesize
20.8MB
-
Filesize
6.9MB