Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

MultiCheck...al.exe

windows7-x64

7

MultiCheck...al.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MultiChecker by injuankanal.exe

  • Size

    86.0MB

  • Sample

    240203-d6dt5aaecj

  • MD5

    babe3da3eb741b6ed3ff61ff17e9b03a

  • SHA1

    a71a4e3efe15498ab248eaddf09241bea80330a0

  • SHA256

    f1b5484e2de6dd07f9d05819e5e969256cd18df1c96c794a9c0377c4ec177ffe

  • SHA512

    1d1fe46ab9132a0ea92183de92d1e80b65cb06ed9bb4754b92b8ea8e98f7e3392cb74179d4125fcf9e0cf9fb1b3dd302115f155ef0973cbd9ec3d8e31da7cf14

  • SSDEEP

    6144:lDKW1Fgbdl0TBBvjc/tebqa/95xaT390+8Jb1kek5H0usk7V1f7E:dh1Fk70TnvjcVNa15xaT39AbWeaUAD

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      MultiChecker by injuankanal.exe

    • Size

      86.0MB

    • MD5

      babe3da3eb741b6ed3ff61ff17e9b03a

    • SHA1

      a71a4e3efe15498ab248eaddf09241bea80330a0

    • SHA256

      f1b5484e2de6dd07f9d05819e5e969256cd18df1c96c794a9c0377c4ec177ffe

    • SHA512

      1d1fe46ab9132a0ea92183de92d1e80b65cb06ed9bb4754b92b8ea8e98f7e3392cb74179d4125fcf9e0cf9fb1b3dd302115f155ef0973cbd9ec3d8e31da7cf14

    • SSDEEP

      6144:lDKW1Fgbdl0TBBvjc/tebqa/95xaT390+8Jb1kek5H0usk7V1f7E:dh1Fk70TnvjcVNa15xaT39AbWeaUAD

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks