Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
507180e75c6daae7d802c4c4128d4c62ebf334a6c733db4d078fe53b81513f53
-
Size
497KB
-
Sample
231023-thz1fsbf85
-
MD5
97b28e31c893f9b362f3c06debba492a
-
SHA1
29b63e112ba4f18418248af5513a728262097487
-
SHA256
507180e75c6daae7d802c4c4128d4c62ebf334a6c733db4d078fe53b81513f53
-
SHA512
e4f8ead5badeb76a528b57f4cf30a1800f8a7c9b1ca6cbb6bd7a26f551749b087544b5c3c6049d5d952a1b1f85834293e49da309bd91e2e504aa8d148730d812
-
SSDEEP
6144:JyIsQ6QfD2brEeyt8zpUOAia60W2CBFAR2S64AxQcXJ6b25yeQB8AC6ANh:fsQn2bzjzpUOAia60WJS2R+cx5mBEDL
Static task
static1
Behavioral task
behavioral1
Sample
507180e75c6daae7d802c4c4128d4c62ebf334a6c733db4d078fe53b81513f53.exe
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
507180e75c6daae7d802c4c4128d4c62ebf334a6c733db4d078fe53b81513f53
-
Size
497KB
-
MD5
97b28e31c893f9b362f3c06debba492a
-
SHA1
29b63e112ba4f18418248af5513a728262097487
-
SHA256
507180e75c6daae7d802c4c4128d4c62ebf334a6c733db4d078fe53b81513f53
-
SHA512
e4f8ead5badeb76a528b57f4cf30a1800f8a7c9b1ca6cbb6bd7a26f551749b087544b5c3c6049d5d952a1b1f85834293e49da309bd91e2e504aa8d148730d812
-
SSDEEP
6144:JyIsQ6QfD2brEeyt8zpUOAia60W2CBFAR2S64AxQcXJ6b25yeQB8AC6ANh:fsQn2bzjzpUOAia60WJS2R+cx5mBEDL
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-