Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2Mm368BM.exe
-
Size
221KB
-
Sample
231013-gzjctahb97
-
MD5
826a37c18521d00fd8663aedb2c0072a
-
SHA1
3ae423041a522f9b53be3dd487eacd62c15d0bcf
-
SHA256
5f5cb4163545b829d92e2bd9183c9bd80716569d885d6596e08554387c530263
-
SHA512
5fb75d17c767b62ec77eef2298e0093e2dbd360e74a2c3922a362d0a1b24650235e6d55090fa52c1b6595bae50ebb391f02a3a67937ea00a1b7bdbfedb8e55a3
-
SSDEEP
3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ
Behavioral task
behavioral1
Sample
2Mm368BM.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2Mm368BM.exe
Resource
win10-20230915-en
Malware Config
Extracted
redline
kukish
77.91.124.55:19071
Targets
-
-
Target
2Mm368BM.exe
-
Size
221KB
-
MD5
826a37c18521d00fd8663aedb2c0072a
-
SHA1
3ae423041a522f9b53be3dd487eacd62c15d0bcf
-
SHA256
5f5cb4163545b829d92e2bd9183c9bd80716569d885d6596e08554387c530263
-
SHA512
5fb75d17c767b62ec77eef2298e0093e2dbd360e74a2c3922a362d0a1b24650235e6d55090fa52c1b6595bae50ebb391f02a3a67937ea00a1b7bdbfedb8e55a3
-
SSDEEP
3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-