Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2023, 01:01

General

  • Target

    d8834028fb54c34a9889233eff9b318518e99abf33077d95a6ff92fa6f909643.exe

  • Size

    970KB

  • MD5

    0d9895c0f610eaa133bbcb1069e19353

  • SHA1

    e24f42d4d246ca073849f1732da602b81ebc8ceb

  • SHA256

    d8834028fb54c34a9889233eff9b318518e99abf33077d95a6ff92fa6f909643

  • SHA512

    405da3aea7582ade0ec497ce4ec8acb3f7c4b537518b53a9d869f441c10cfd489a51cd1d393679176d3275e2f1f56f70d3b7c46823d1b0315b7778338ec87200

  • SSDEEP

    24576:Gyfhy2GEkfNR3QHqFn1vmSNGKqiNmtdD:xfhZGEkfNR3QHqFn5mSkKqiNmT

Score
10/10

Malware Config

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

  • RedLine payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d8834028fb54c34a9889233eff9b318518e99abf33077d95a6ff92fa6f909643.exe
    "C:\Users\Admin\AppData\Local\Temp\d8834028fb54c34a9889233eff9b318518e99abf33077d95a6ff92fa6f909643.exe"
    1⤵
      PID:3004

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3004-0-0x0000000074AF0000-0x00000000752A0000-memory.dmp

      Filesize

      7.7MB

    • memory/3004-1-0x0000000002CB0000-0x0000000002CC0000-memory.dmp

      Filesize

      64KB

    • memory/3004-2-0x0000000002A50000-0x0000000002AAA000-memory.dmp

      Filesize

      360KB

    • memory/3004-3-0x0000000002CB0000-0x0000000002CC0000-memory.dmp

      Filesize

      64KB

    • memory/3004-4-0x0000000007D40000-0x00000000082E4000-memory.dmp

      Filesize

      5.6MB

    • memory/3004-5-0x0000000007830000-0x00000000078C2000-memory.dmp

      Filesize

      584KB

    • memory/3004-6-0x0000000002CB0000-0x0000000002CC0000-memory.dmp

      Filesize

      64KB

    • memory/3004-7-0x00000000078D0000-0x00000000078DA000-memory.dmp

      Filesize

      40KB

    • memory/3004-8-0x0000000008910000-0x0000000008F28000-memory.dmp

      Filesize

      6.1MB

    • memory/3004-9-0x0000000007A90000-0x0000000007AA2000-memory.dmp

      Filesize

      72KB

    • memory/3004-10-0x0000000007BC0000-0x0000000007CCA000-memory.dmp

      Filesize

      1.0MB

    • memory/3004-11-0x0000000007AF0000-0x0000000007B2C000-memory.dmp

      Filesize

      240KB

    • memory/3004-12-0x0000000007B50000-0x0000000007B9C000-memory.dmp

      Filesize

      304KB

    • memory/3004-13-0x0000000074AF0000-0x00000000752A0000-memory.dmp

      Filesize

      7.7MB

    • memory/3004-14-0x0000000002CB0000-0x0000000002CC0000-memory.dmp

      Filesize

      64KB

    • memory/3004-15-0x0000000002CB0000-0x0000000002CC0000-memory.dmp

      Filesize

      64KB

    • memory/3004-16-0x0000000002CB0000-0x0000000002CC0000-memory.dmp

      Filesize

      64KB