Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

External v_4.26.exe

windows11-21h2-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    External v_4.26.exe

  • Size

    279KB

  • Sample

    240408-rj5wzsed5x

  • MD5

    1b3a071cd0ad94839874a3471e89b8aa

  • SHA1

    ce82ce87e39705d8b05055fbdfacafa675f9b4db

  • SHA256

    4ec76eb7a26ba0b31255b177ff476b0dc2d7cba06dd015eac838cb0e585d1b7f

  • SHA512

    796eda6dece8257d115a98a7ca5c33e39078e8f7275fe17f42d5b73e4d826889a09ae2e2e8f6987630b66d26b2da88f5eabee4a2bb330cf947638590f7169b00

  • SSDEEP

    6144:K/PT2fQDz89hqi1l+t7aelEgNOXG9imxUg:cLCQU9hqi+lEgNoe9x

Score
10/10
redlinezgratdiscoveryinfostealerratspywarestealer

Malware Config

Targets

    • Target

      External v_4.26.exe

    • Size

      279KB

    • MD5

      1b3a071cd0ad94839874a3471e89b8aa

    • SHA1

      ce82ce87e39705d8b05055fbdfacafa675f9b4db

    • SHA256

      4ec76eb7a26ba0b31255b177ff476b0dc2d7cba06dd015eac838cb0e585d1b7f

    • SHA512

      796eda6dece8257d115a98a7ca5c33e39078e8f7275fe17f42d5b73e4d826889a09ae2e2e8f6987630b66d26b2da88f5eabee4a2bb330cf947638590f7169b00

    • SSDEEP

      6144:K/PT2fQDz89hqi1l+t7aelEgNOXG9imxUg:cLCQU9hqi+lEgNoe9x

    Score
    10/10
    redlinezgratdiscoveryinfostealerratspywarestealer

    • Detect ZGRat V1

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks