Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
290s -
max time network
307s -
platform
windows10-1703_x64 -
resource
win10-20230831-en -
resource tags
-
submitted
04/09/2023, 01:23
General
-
Target
n1105194.exe
-
Size
174KB
-
MD5
8473aaecadd6c6ba1aa1c46a4e601b80
-
SHA1
e53226ae79eab34d6c7c52c875c61a3e3fd1ef5a
-
SHA256
98f631b654912dccaae91e51440a8a56cc19a333c0b6f61a64d94d2516ff0eed
-
SHA512
031fbd0d5daccb03ee52b24c5e3102223376aaec5d20d1611209aa7d7f4595a61ffc0bb0152c356a172ef460937894fb13f287f58e62d45338ef8ddf18c62734
-
SSDEEP
3072:rhcAmySI0PC7vZObhfDmj/BRaUTE0EY4SJY8e8h8:rhNSI0PC7vjCUTE0d+
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
domka
C2
77.91.124.82:19071
Attributes
-
auth_value
74e19436acac85e44d691aebcc617529
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\n1105194.exe"C:\Users\Admin\AppData\Local\Temp\n1105194.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
6.9MB
-
Filesize
24KB
-
Filesize
6.0MB
-
Filesize
1.0MB
-
Filesize
72KB
-
Filesize
64KB
-
Filesize
248KB
-
Filesize
300KB
-
Filesize
6.9MB
-
Filesize
64KB