Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
47e21ddc3a9c6ba14d207bd23cd5dd155df00f3952f9e25c3f962b944bf89288
-
Size
1.1MB
-
Sample
240502-gk73maae8y
-
MD5
e2ddbc9770edb5ec6528f89c52c893a4
-
SHA1
e3b664e167219368c232fe0d4003c889414f94bd
-
SHA256
47e21ddc3a9c6ba14d207bd23cd5dd155df00f3952f9e25c3f962b944bf89288
-
SHA512
ee609adb22a89fb9460234e31ba8bbf9d06452c3e713b85f543cf1d4dcd814a73e7794b71ece7ddbddf3342e948d76fc16a095f7fbbca522780efa22c9d3e815
-
SSDEEP
12288:floH6cfu3Yp9M8iCNC8y0L5gagKYDZB/DEwP+umyIyT0kQGerEoQKl9cIiE+h:CHhfu3Yp9M8iCQ895yBDZB/zWGeAoZ
Static task
static1
Behavioral task
behavioral1
Sample
47e21ddc3a9c6ba14d207bd23cd5dd155df00f3952f9e25c3f962b944bf89288.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
47e21ddc3a9c6ba14d207bd23cd5dd155df00f3952f9e25c3f962b944bf89288.exe
Resource
win10-20240404-en
Malware Config
Extracted
redline
LogsDiller Cloud (Telegram: @logsdillabot)
194.169.175.234:27221
Targets
-
-
Target
47e21ddc3a9c6ba14d207bd23cd5dd155df00f3952f9e25c3f962b944bf89288
-
Size
1.1MB
-
MD5
e2ddbc9770edb5ec6528f89c52c893a4
-
SHA1
e3b664e167219368c232fe0d4003c889414f94bd
-
SHA256
47e21ddc3a9c6ba14d207bd23cd5dd155df00f3952f9e25c3f962b944bf89288
-
SHA512
ee609adb22a89fb9460234e31ba8bbf9d06452c3e713b85f543cf1d4dcd814a73e7794b71ece7ddbddf3342e948d76fc16a095f7fbbca522780efa22c9d3e815
-
SSDEEP
12288:floH6cfu3Yp9M8iCNC8y0L5gagKYDZB/DEwP+umyIyT0kQGerEoQKl9cIiE+h:CHhfu3Yp9M8iCQ895yBDZB/zWGeAoZ
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext
-