Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 12:01
Static task
static1
Behavioral task
behavioral1
Sample
0513d3905ab12a59730c91e3c45519a5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0513d3905ab12a59730c91e3c45519a5_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0513d3905ab12a59730c91e3c45519a5_JaffaCakes118.exe
-
Size
379KB
-
MD5
0513d3905ab12a59730c91e3c45519a5
-
SHA1
8585608ceb11541a97c64b5fc331fe8002bc424d
-
SHA256
a4a2852ac8bee3a1fdfa5785be1ebb6df624a0eea73256e6c18f206117b68638
-
SHA512
a13e7ff45b91f5e55082e899358836156d75cf040007d89786cbc8b88f4a7b408540339725bc1a67cd926118b2b88a18c2ea57a548fcfb9aff01e192f0817ce2
-
SSDEEP
6144:HHRH279Bi2UrYraSaJ3hOo6FkB7fjz/BjwFE7AVx98aC3aigE3:nRH279HUrc7a9hOFFkBr//Jc5H8n3
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 4 IoCs
resource yara_rule behavioral1/memory/2964-6-0x00000000048C0000-0x0000000004900000-memory.dmp family_redline behavioral1/memory/2964-4-0x0000000002250000-0x0000000002296000-memory.dmp family_redline behavioral1/memory/2964-8-0x00000000047D0000-0x0000000004814000-memory.dmp family_redline behavioral1/memory/2964-9-0x00000000048C0000-0x0000000004900000-memory.dmp family_redline