Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c85533dc3627cc14b81a22fb204c42c9e5527e15ad78c832da7a159825de6ec7
-
Size
2.2MB
-
Sample
240314-lx7d3sbd68
-
MD5
b1087aa5a1a538d7ee3bd9c3b774bb38
-
SHA1
0842a7d8905be9dbe06f9b2bd7376f33373af246
-
SHA256
c85533dc3627cc14b81a22fb204c42c9e5527e15ad78c832da7a159825de6ec7
-
SHA512
46aec87f752382ec9a5ce6f45af70ab54ae3fe158cd2084b27ca55d8224c83417c8a13091648b4b1ffdbf76f2b88ffa0424a76d3619c3516645e70b0c6969cb6
-
SSDEEP
24576:EQ1OwhF5/u7S/OiUVkcOpckjLDSvWrtaG2cskcA8AvuyLdk0JdQGwct28MENdhX2:DMwP5/u79ScOqkjqOrnq29QFxa
Static task
static1
Behavioral task
behavioral1
Sample
c85533dc3627cc14b81a22fb204c42c9e5527e15ad78c832da7a159825de6ec7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c85533dc3627cc14b81a22fb204c42c9e5527e15ad78c832da7a159825de6ec7.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
redline
Legaa
185.172.128.33:38294
Targets
-
-
Target
c85533dc3627cc14b81a22fb204c42c9e5527e15ad78c832da7a159825de6ec7
-
Size
2.2MB
-
MD5
b1087aa5a1a538d7ee3bd9c3b774bb38
-
SHA1
0842a7d8905be9dbe06f9b2bd7376f33373af246
-
SHA256
c85533dc3627cc14b81a22fb204c42c9e5527e15ad78c832da7a159825de6ec7
-
SHA512
46aec87f752382ec9a5ce6f45af70ab54ae3fe158cd2084b27ca55d8224c83417c8a13091648b4b1ffdbf76f2b88ffa0424a76d3619c3516645e70b0c6969cb6
-
SSDEEP
24576:EQ1OwhF5/u7S/OiUVkcOpckjLDSvWrtaG2cskcA8AvuyLdk0JdQGwct28MENdhX2:DMwP5/u79ScOqkjqOrnq29QFxa
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext
-