Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
96dd07bd64cbe4630378e1fedf380db4acce8e0fad4a3f650126fda5e4b8fe2c
-
Size
1.1MB
-
Sample
230821-p8yg4aef51
-
MD5
b9354b705b43d6df721ad99268a5481e
-
SHA1
4e241c11bdd1d492c59c8c600bcfa99b01274ad6
-
SHA256
96dd07bd64cbe4630378e1fedf380db4acce8e0fad4a3f650126fda5e4b8fe2c
-
SHA512
c273bf450ef1e8ebf17e8ed9fcda0726410fe4f74ec2e21fd594399f8c319a978a1f5af783114b72627ede6535877dbdcb1a5086251fcc9936a320ed639c37c8
-
SSDEEP
12288:wk7VqU/1/jovUc7PvqoPXaS3Kt/VCzpG5XM+mJI/3eD5+1uYdHp3jX6d9GNnwpzF:wkd1/jg7PvqovaJlM+EIPeEXUCwpz
Static task
static1
Behavioral task
behavioral1
Sample
96dd07bd64cbe4630378e1fedf380db4acce8e0fad4a3f650126fda5e4b8fe2c.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
TEST
46.149.77.25:8599
-
auth_value
8bc44a2d180183251d176d7b20ad1f91
Targets
-
-
Target
96dd07bd64cbe4630378e1fedf380db4acce8e0fad4a3f650126fda5e4b8fe2c
-
Size
1.1MB
-
MD5
b9354b705b43d6df721ad99268a5481e
-
SHA1
4e241c11bdd1d492c59c8c600bcfa99b01274ad6
-
SHA256
96dd07bd64cbe4630378e1fedf380db4acce8e0fad4a3f650126fda5e4b8fe2c
-
SHA512
c273bf450ef1e8ebf17e8ed9fcda0726410fe4f74ec2e21fd594399f8c319a978a1f5af783114b72627ede6535877dbdcb1a5086251fcc9936a320ed639c37c8
-
SSDEEP
12288:wk7VqU/1/jovUc7PvqoPXaS3Kt/VCzpG5XM+mJI/3eD5+1uYdHp3jX6d9GNnwpzF:wkd1/jg7PvqovaJlM+EIPeEXUCwpz
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-