Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

CoffeeInjector.exe

windows7-x64

1

CoffeeInjector.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CoffeeInjector.exe

  • Size

    2.3MB

  • Sample

    240126-s9xhzahbb8

  • MD5

    e7696bfd625a70e8f23d37d50f934f62

  • SHA1

    e4bc43ef26f877d8c99a6bbead92880e6956197e

  • SHA256

    d85c505f6b29d7e16ae188e53b8e9aa2cd2e74f2d7ca8d9109efbc67cb09418a

  • SHA512

    844cdd551daf809b945d6c286d773e92c93613e8c54735c70ac87a7a07e82aed1757f7052935c7f0c2b9de38b91ac7e3d57095c073e9bed0a67d0201cc4c3212

  • SSDEEP

    24576:ftxI82/duR8vWOGzltK2FU12NGXCja6az1HGMTREz+q/pGzVLgioox:1+BdgWWBQ2FxNoCj2ZHGOlcl

Score
10/10
redlineinfostealerspyware

Malware Config

Targets

    • Target

      CoffeeInjector.exe

    • Size

      2.3MB

    • MD5

      e7696bfd625a70e8f23d37d50f934f62

    • SHA1

      e4bc43ef26f877d8c99a6bbead92880e6956197e

    • SHA256

      d85c505f6b29d7e16ae188e53b8e9aa2cd2e74f2d7ca8d9109efbc67cb09418a

    • SHA512

      844cdd551daf809b945d6c286d773e92c93613e8c54735c70ac87a7a07e82aed1757f7052935c7f0c2b9de38b91ac7e3d57095c073e9bed0a67d0201cc4c3212

    • SSDEEP

      24576:ftxI82/duR8vWOGzltK2FU12NGXCja6az1HGMTREz+q/pGzVLgioox:1+BdgWWBQ2FxNoCj2ZHGOlcl

    Score
    10/10
    redlineinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks