Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
154s -
max time network
181s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
11/10/2023, 20:17
General
-
Target
0x0006000000023235-67.exe
-
Size
175KB
-
MD5
284b3be0d94bfab0966e3fe7a38d0f5d
-
SHA1
cdecc0e836371d05b1f2a50617d7fabe5fd7bdd2
-
SHA256
d3b01fce90402dd9f3717c16b6df2fa80a4590f38adb4ce0cb7220525464898f
-
SHA512
97e5f3ac23b05bd7c62ba1c2366783f337dc937ee09bd0ed880b6e09d366a4772cf98843f206d38e7534f6ccbc8202b2e1ff6650fb4385aa3b1d22f86b75bced
-
SSDEEP
3072:KiZIEVII0FNuHZOJpFLizeIkqffffffffffffffffffffffvfffffffffffffffm:KiVII0FNuHYIpffffffffffffffffff3
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
tuxiu
C2
77.91.124.82:19071
Attributes
-
auth_value
29610cdad07e7187eec70685a04b89fe
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x0006000000023235-67.exe"C:\Users\Admin\AppData\Local\Temp\0x0006000000023235-67.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
7.7MB
-
Filesize
24KB
-
Filesize
6.1MB
-
Filesize
1.0MB
-
Filesize
72KB
-
Filesize
64KB
-
Filesize
240KB
-
Filesize
304KB
-
Filesize
7.7MB
-
Filesize
64KB