Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
11/10/2023, 00:51
231011-a7gevsbe37 1011/10/2023, 00:50
231011-a652tshd41 1031/01/2023, 09:06
230131-k21xeshe3z 7Analysis
-
max time kernel
142s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
11/10/2023, 00:51
General
-
Target
RDR2CHEAT/PrimeXLauncher.exe
-
Size
159KB
-
MD5
0c2de2a3c96398428b0ce53ee8be212f
-
SHA1
348a9089ecdc242b2d729f642a70794d74c9a06b
-
SHA256
1331d10811b5b02f55f7a6fa0e957543c2c2ea5c9817518f97905b6038dfed93
-
SHA512
b767bb3487ddca3bfd8d998b675d149f06473190755d8b0402469ddfebfc4121384bd65107850036b67f72429bd8fca399b9b3ec54f088a49935f20ca5d3f0a3
-
SSDEEP
3072:OaAzRVKaMvVMLGXVJYkwOQKlTXSRBI1IVZQLv0e0Ut:OaAzRV9MMIF1IVZQLv
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
FONDNESS
C2
89.22.234.180:40608
Attributes
-
auth_value
8dd80c7c3aad106b12e2f6a3afd7a250
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\RDR2CHEAT\PrimeXLauncher.exe"C:\Users\Admin\AppData\Local\Temp\RDR2CHEAT\PrimeXLauncher.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.7MB
-
Filesize
184KB
-
Filesize
6.1MB
-
Filesize
72KB
-
Filesize
1.0MB
-
Filesize
64KB
-
Filesize
240KB
-
Filesize
304KB
-
Filesize
7.7MB
-
Filesize
64KB