Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file

  • Size

    399KB

  • Sample

    231012-sz1gwabb43

  • MD5

    fab1aa4abe3f6eedaf46f4840eae7568

  • SHA1

    aed72464992d8e8c2f84477c47cd84e40d45ae23

  • SHA256

    9871bad0fe503c40a0eab3cf108ac0a92b390af6ff5022a1760d388719642672

  • SHA512

    5d3c58b83986ebd102996b632bb970c3ac4f5224f1898f447afc59f1197d660591f1cb366ad5c3823ba1f7d41cb87da21385e33529733e3d42fbb39a5f30ee04

  • SSDEEP

    6144:upxjES2jicP5iOo2T8VrSd/sUAOMclt0KzaNxEXkbReevzYQlqLBe1Sa:upxDqiG59ouuc8ikxEuNvz/Ie1Sa

Score
10/10
redlinesmokiezinfostealer

Malware Config

Extracted

Family

redline

Botnet

smokiez

C2

194.169.175.232:45450

Attributes
  • auth_value

    7b7d8a036038ab89b98f422d559b4f8f

Targets

    • Target

      file

    • Size

      399KB

    • MD5

      fab1aa4abe3f6eedaf46f4840eae7568

    • SHA1

      aed72464992d8e8c2f84477c47cd84e40d45ae23

    • SHA256

      9871bad0fe503c40a0eab3cf108ac0a92b390af6ff5022a1760d388719642672

    • SHA512

      5d3c58b83986ebd102996b632bb970c3ac4f5224f1898f447afc59f1197d660591f1cb366ad5c3823ba1f7d41cb87da21385e33529733e3d42fbb39a5f30ee04

    • SSDEEP

      6144:upxjES2jicP5iOo2T8VrSd/sUAOMclt0KzaNxEXkbReevzYQlqLBe1Sa:upxDqiG59ouuc8ikxEuNvz/Ie1Sa

    Score
    10/10
    redlinesmokiezinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks