Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5fd7d8a189dd4e5cb0005d48508b4e6f88fe07550c83d3ac110656a8b558d3f5.zip
-
Size
3.8MB
-
Sample
231022-vkb7vabc31
-
MD5
ddc446a8adcb0f675b64d2f7a140cba3
-
SHA1
43d23fe688b18bcc9c61e78676a736e4124a871e
-
SHA256
b54bdf8850af2b2dadf59d6581f55948e31c7b38a691ba60e6891057bb2723a8
-
SHA512
9d08e6812c4bd7e1deb9ee3531c6e48953517f5a22f8e79941ef0576e0ec802fa9464340d2ecf6f04dd66dda54b2b378e7f6e1b36cfa7677a7336882bc78ee1f
-
SSDEEP
98304:hX6n/whVWHIDAVeAhODeoUb/NC6QaiategpP2kIvx:Z6n/wzWHIDAVeAYiDb/k6n6gFcvx
Static task
static1
Behavioral task
behavioral1
Sample
5fd7d8a189dd4e5cb0005d48508b4e6f88fe07550c83d3ac110656a8b558d3f5.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
5fd7d8a189dd4e5cb0005d48508b4e6f88fe07550c83d3ac110656a8b558d3f5.exe
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
5fd7d8a189dd4e5cb0005d48508b4e6f88fe07550c83d3ac110656a8b558d3f5.exe
-
Size
7.8MB
-
MD5
563296f99f48012095c055b9edd6180f
-
SHA1
fac31bc5af63c7f504f082a1e4be543fdba2345d
-
SHA256
5fd7d8a189dd4e5cb0005d48508b4e6f88fe07550c83d3ac110656a8b558d3f5
-
SHA512
60dfa52df38a1a6ff23271ceccb0885512d150931d2a6005128087853519ddf8da71b3853ed01e56c90e01f877b5bd238e6eb96673fb5ce09edf3402885c650b
-
SSDEEP
49152:59CGC88PPVhP+rb/TRvO90d7HjmAFd4A64nsfJW54rMIUI/co5lKMWczKx/DWck8:yP7q+MHqmycJCR3gFI7oEIbGwGtm
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-