Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

5fd7d8a189...f5.exe

windows7-x64

10

5fd7d8a189...f5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5fd7d8a189dd4e5cb0005d48508b4e6f88fe07550c83d3ac110656a8b558d3f5.zip

  • Size

    3.8MB

  • Sample

    231022-vkb7vabc31

  • MD5

    ddc446a8adcb0f675b64d2f7a140cba3

  • SHA1

    43d23fe688b18bcc9c61e78676a736e4124a871e

  • SHA256

    b54bdf8850af2b2dadf59d6581f55948e31c7b38a691ba60e6891057bb2723a8

  • SHA512

    9d08e6812c4bd7e1deb9ee3531c6e48953517f5a22f8e79941ef0576e0ec802fa9464340d2ecf6f04dd66dda54b2b378e7f6e1b36cfa7677a7336882bc78ee1f

  • SSDEEP

    98304:hX6n/whVWHIDAVeAhODeoUb/NC6QaiategpP2kIvx:Z6n/wzWHIDAVeAYiDb/k6n6gFcvx

Score
10/10
redlineinfostealerspyware

Malware Config

Targets

    • Target

      5fd7d8a189dd4e5cb0005d48508b4e6f88fe07550c83d3ac110656a8b558d3f5.exe

    • Size

      7.8MB

    • MD5

      563296f99f48012095c055b9edd6180f

    • SHA1

      fac31bc5af63c7f504f082a1e4be543fdba2345d

    • SHA256

      5fd7d8a189dd4e5cb0005d48508b4e6f88fe07550c83d3ac110656a8b558d3f5

    • SHA512

      60dfa52df38a1a6ff23271ceccb0885512d150931d2a6005128087853519ddf8da71b3853ed01e56c90e01f877b5bd238e6eb96673fb5ce09edf3402885c650b

    • SSDEEP

      49152:59CGC88PPVhP+rb/TRvO90d7HjmAFd4A64nsfJW54rMIUI/co5lKMWczKx/DWck8:yP7q+MHqmycJCR3gFI7oEIbGwGtm

    Score
    10/10
    redlineinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks