Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
8s -
max time network
88s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
08/01/2024, 19:56
Static task
static1
Behavioral task
behavioral1
Sample
mystify.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
mystify.exe
Resource
win10v2004-20231222-en
General
-
Target
mystify.exe
-
Size
618KB
-
MD5
56310a2d2f98a4fe082b8ab1df7715cd
-
SHA1
19f5b8fc34cec9738667ba76c539dfaa17a0a2df
-
SHA256
4d49c61647576d71405df122d55a461940ae46c11da96380ba1c6e5e042060bf
-
SHA512
144f407b492653c0bb1bc3d13ce0376d21115cd6e70a244e6451256374c500d50ffe53e1cf326a4ccd5e727e538fc11ece46eb9f8363e8a5b2a80743db553c33
-
SSDEEP
12288:jspCMScwWKnIlhIrtXzEwo+GSUnxp4qh9+CkqcQOH:jsLSrnIlhUtXzEwi9+nQOH
Malware Config
Extracted
redline
@mayotiqq
45.15.156.167:80
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
resource yara_rule behavioral2/memory/4480-0-0x0000000000A20000-0x0000000000A72000-memory.dmp family_redline