Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a84551c0dd38fabac8730e304f8fa159.exe
-
Size
931KB
-
Sample
231211-cwvt8abhd5
-
MD5
a84551c0dd38fabac8730e304f8fa159
-
SHA1
906ea86d4ed03e58ea2ee7d562c42331d8336d86
-
SHA256
ffb78b11e896ea9e8f172dec96ab801f66ac29df8102eda69bff1070225c4db1
-
SHA512
86414a9dea6b4ff8543f89168c10d1271fab68aa3fb8ebc22293e27bfd55dccf63e74994b187540fb2ac0489ac9253901ddf9a9b0aa6b346a6a05cdd6cc6ca9c
-
SSDEEP
12288:Mo8KQe7S/+322Ghabdq399BObcCiZFU6d5WDAWHKVbnIGWBuhNy38XaPLMB:qKO/+3HGhabdO9pe6f8/SMPLMXajMB
Static task
static1
Behavioral task
behavioral1
Sample
a84551c0dd38fabac8730e304f8fa159.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
a84551c0dd38fabac8730e304f8fa159.exe
Resource
win10v2004-20231127-en
Malware Config
Extracted
smokeloader
2022
http://81.19.131.34/fks/index.php
Extracted
redline
LiveTraffic
77.105.132.87:6731
Extracted
redline
@oleh_ps
176.123.7.190:32927
Extracted
smokeloader
up3
Targets
-
-
Target
a84551c0dd38fabac8730e304f8fa159.exe
-
Size
931KB
-
MD5
a84551c0dd38fabac8730e304f8fa159
-
SHA1
906ea86d4ed03e58ea2ee7d562c42331d8336d86
-
SHA256
ffb78b11e896ea9e8f172dec96ab801f66ac29df8102eda69bff1070225c4db1
-
SHA512
86414a9dea6b4ff8543f89168c10d1271fab68aa3fb8ebc22293e27bfd55dccf63e74994b187540fb2ac0489ac9253901ddf9a9b0aa6b346a6a05cdd6cc6ca9c
-
SSDEEP
12288:Mo8KQe7S/+322Ghabdq399BObcCiZFU6d5WDAWHKVbnIGWBuhNy38XaPLMB:qKO/+3HGhabdO9pe6f8/SMPLMXajMB
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-