Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b90289710f82c8ba82ffbe0f183f1aedcbdc3b7f0c2f1f19f867f2d18d2ed4ec
-
Size
756KB
-
Sample
230819-276hjaeb7z
-
MD5
16e9f643569a7ed768dfc9addfb7463b
-
SHA1
2abbf854990fdc353caec71c84c052c8559fefd5
-
SHA256
b90289710f82c8ba82ffbe0f183f1aedcbdc3b7f0c2f1f19f867f2d18d2ed4ec
-
SHA512
2d7eb6817c65193e98057823538d40fba79b3b2d43877186122f0a33f807366d2e5c84ece79d561e07caeb664573d4cce7488c092cc6677c30b4f9033e0cc2a3
-
SSDEEP
12288:DMrUy90lW07G+tQoAz6CT3LlLFVGMXgoi/9bijSWnINYVylxa40zsO7yjzI7ZMEy:/yH0a356CDLlJVZXE9WFIvT077IzI3y
Static task
static1
Behavioral task
behavioral1
Sample
b90289710f82c8ba82ffbe0f183f1aedcbdc3b7f0c2f1f19f867f2d18d2ed4ec.exe
Resource
win10-20230703-en
Malware Config
Extracted
amadey
S-%lu-
77.91.68.18/nice/index.php
3.87/nice/index.php
Extracted
redline
jonka
77.91.124.73:19071
-
auth_value
c95bc30cd252fa6dff2a19fd78bfab4e
Targets
-
-
Target
b90289710f82c8ba82ffbe0f183f1aedcbdc3b7f0c2f1f19f867f2d18d2ed4ec
-
Size
756KB
-
MD5
16e9f643569a7ed768dfc9addfb7463b
-
SHA1
2abbf854990fdc353caec71c84c052c8559fefd5
-
SHA256
b90289710f82c8ba82ffbe0f183f1aedcbdc3b7f0c2f1f19f867f2d18d2ed4ec
-
SHA512
2d7eb6817c65193e98057823538d40fba79b3b2d43877186122f0a33f807366d2e5c84ece79d561e07caeb664573d4cce7488c092cc6677c30b4f9033e0cc2a3
-
SSDEEP
12288:DMrUy90lW07G+tQoAz6CT3LlLFVGMXgoi/9bijSWnINYVylxa40zsO7yjzI7ZMEy:/yH0a356CDLlJVZXE9WFIvT077IzI3y
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-