Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9978122d8b90575e7bfeb09cba339e5c6336d852724a37dc2b4d4de6813696d1

  • Size

    6.5MB

  • Sample

    240429-eyebcsad4w

  • MD5

    682e25cf5897e24f3a31f21741fb0f11

  • SHA1

    d9b228b9b20f3397514d3f12b67ad42e166cab39

  • SHA256

    9978122d8b90575e7bfeb09cba339e5c6336d852724a37dc2b4d4de6813696d1

  • SHA512

    1313b05abe9c79863856eabdc60a228ad320d8e4928758c072b33b1735418b309489d05c70b9e86a08280efa4f9a0af8f9ebf307630392a3088fdb97c15efe98

  • SSDEEP

    196608:pbnyiVLkzy7SuxwY4YaWJJulOpH5mZHi8Lr+g2qyeOQr7tlW7FT29y7q2wMyQcaS:pyRX674+j+

Score
10/10
redlinezgratinfostealerratspyware

Malware Config

Targets

    • Target

      9978122d8b90575e7bfeb09cba339e5c6336d852724a37dc2b4d4de6813696d1

    • Size

      6.5MB

    • MD5

      682e25cf5897e24f3a31f21741fb0f11

    • SHA1

      d9b228b9b20f3397514d3f12b67ad42e166cab39

    • SHA256

      9978122d8b90575e7bfeb09cba339e5c6336d852724a37dc2b4d4de6813696d1

    • SHA512

      1313b05abe9c79863856eabdc60a228ad320d8e4928758c072b33b1735418b309489d05c70b9e86a08280efa4f9a0af8f9ebf307630392a3088fdb97c15efe98

    • SSDEEP

      196608:pbnyiVLkzy7SuxwY4YaWJJulOpH5mZHi8Lr+g2qyeOQr7tlW7FT29y7q2wMyQcaS:pyRX674+j+

    Score
    10/10
    zgratratredlineinfostealerspyware

    • Detect ZGRat V1

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Loads dropped DLL

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks