Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c7942b52b4771ecf07eb018115306fc87891f0199294e098bbc10ce8353c768a
-
Size
774KB
-
Sample
230819-rl2bksaf52
-
MD5
4b47fa82407520fac088a663f67bf63f
-
SHA1
fea7682c763dfb59c0d03d6a6fec2d57b88d73d3
-
SHA256
c7942b52b4771ecf07eb018115306fc87891f0199294e098bbc10ce8353c768a
-
SHA512
5444b61a60363df0eb1adc3d69fad5780a5f73d89c969f5b0bf29194e20c6eae91ef2c68ecaa69065f4274c91a40ad93843b38aa83fdeea5b84c7b243ea96b22
-
SSDEEP
12288:MMrpy90ybKmodhIw31rTOKJ/e7nCuKRpEXgp7QurlQbvsWgnKYwkUiz:FyBSd+w31rTOaG7npKzEonrGhBkUA
Static task
static1
Behavioral task
behavioral1
Sample
c7942b52b4771ecf07eb018115306fc87891f0199294e098bbc10ce8353c768a.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
amadey
S-%lu-
77.91.68.18/nice/index.php
3.87/nice/index.php
Extracted
redline
jonka
77.91.124.73:19071
-
auth_value
c95bc30cd252fa6dff2a19fd78bfab4e
Targets
-
-
Target
c7942b52b4771ecf07eb018115306fc87891f0199294e098bbc10ce8353c768a
-
Size
774KB
-
MD5
4b47fa82407520fac088a663f67bf63f
-
SHA1
fea7682c763dfb59c0d03d6a6fec2d57b88d73d3
-
SHA256
c7942b52b4771ecf07eb018115306fc87891f0199294e098bbc10ce8353c768a
-
SHA512
5444b61a60363df0eb1adc3d69fad5780a5f73d89c969f5b0bf29194e20c6eae91ef2c68ecaa69065f4274c91a40ad93843b38aa83fdeea5b84c7b243ea96b22
-
SSDEEP
12288:MMrpy90ybKmodhIw31rTOKJ/e7nCuKRpEXgp7QurlQbvsWgnKYwkUiz:FyBSd+w31rTOaG7npKzEonrGhBkUA
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-