Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file
-
Size
702KB
-
Sample
230921-wn87esbg52
-
MD5
75b9806a4dcac3cd2db78ea61f4391e3
-
SHA1
d551e0dd927a240a757ccfcb0540d446eb60f59d
-
SHA256
4a6233c912ff669059c5b9b3ab52e5d603033b3bd4f10f4eb50622d37c164242
-
SHA512
bb4d106b62b21e68fbe6959b7b5dc00ac01116e96a1bc891b916a2f07a4adcba10513bbc57a2b7689b41508ea34584acb4424cad5e69d4e5b9b4778210bc773f
-
SSDEEP
12288:j2shISEAQgsPfg64uVQPTpxRFDKofu4vC:j2shIUQgsPfYpJS4a
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
redline
smokiez
194.169.175.232:45450
-
auth_value
7b7d8a036038ab89b98f422d559b4f8f
Targets
-
-
Target
file
-
Size
702KB
-
MD5
75b9806a4dcac3cd2db78ea61f4391e3
-
SHA1
d551e0dd927a240a757ccfcb0540d446eb60f59d
-
SHA256
4a6233c912ff669059c5b9b3ab52e5d603033b3bd4f10f4eb50622d37c164242
-
SHA512
bb4d106b62b21e68fbe6959b7b5dc00ac01116e96a1bc891b916a2f07a4adcba10513bbc57a2b7689b41508ea34584acb4424cad5e69d4e5b9b4778210bc773f
-
SSDEEP
12288:j2shISEAQgsPfg64uVQPTpxRFDKofu4vC:j2shIUQgsPfYpJS4a
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-