Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
488KB
-
Sample
240418-1cfsysfd57
-
MD5
b6d1f343014dc55ef2588ca861db518b
-
SHA1
896f1eb79619be7dcfe3f3b137a59f2ea2712fd7
-
SHA256
e5e5d8f93c5b2df051962b4aec10d2f75207e6b3113ae85faa2d810ca4bcf616
-
SHA512
b015c947158b34241a789b15b248e81e7483a69b519b4df0cd99614219debd8bd57fedfc05788ab97c23402a17dac061284aace69a93951dc1edfd686adc2c52
-
SSDEEP
12288:93re4RXLKXpN3zZ8+A+PbjNHsX+54YzHiegI5pRO0:3RXOXpNVr4+GEHi4U
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
redline
LogsDiller Cloud (TG: @logsdillabot)
5.42.65.50:33080
Targets
-
-
Target
file.exe
-
Size
488KB
-
MD5
b6d1f343014dc55ef2588ca861db518b
-
SHA1
896f1eb79619be7dcfe3f3b137a59f2ea2712fd7
-
SHA256
e5e5d8f93c5b2df051962b4aec10d2f75207e6b3113ae85faa2d810ca4bcf616
-
SHA512
b015c947158b34241a789b15b248e81e7483a69b519b4df0cd99614219debd8bd57fedfc05788ab97c23402a17dac061284aace69a93951dc1edfd686adc2c52
-
SSDEEP
12288:93re4RXLKXpN3zZ8+A+PbjNHsX+54YzHiegI5pRO0:3RXOXpNVr4+GEHi4U
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-