Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e4680b5d58eb24f57fa55432f03bead9.bin.exe

  • Size

    491KB

  • Sample

    240508-pc4z1aed23

  • MD5

    e4680b5d58eb24f57fa55432f03bead9

  • SHA1

    57d840b6d22b97d21d942bb6b437dc4a58b790f0

  • SHA256

    ad79ea754a43dc0566088a655b0e0ba4e2da15ac4271b0f7bdd026eef70e2450

  • SHA512

    79386eb5fa27bc863b510b6cb507ca94e8bdd19dc1d71ceb7ab836908f9853f16f2a00a96e565731dd0a11ca4476a9a2750102ca8298f1b27747daf814b57175

  • SSDEEP

    6144:ZO8HpKGKYUI6KW5NMwvQdKdnsxYAd3NWEtfnlpoAu92AHqkNoin4j3OLNChqOhWQ:ZO8Hp8KFdKdnav3N5luA82iDNDnZ3j

Malware Config

Targets

    • Target

      e4680b5d58eb24f57fa55432f03bead9.bin.exe

    • Size

      491KB

    • MD5

      e4680b5d58eb24f57fa55432f03bead9

    • SHA1

      57d840b6d22b97d21d942bb6b437dc4a58b790f0

    • SHA256

      ad79ea754a43dc0566088a655b0e0ba4e2da15ac4271b0f7bdd026eef70e2450

    • SHA512

      79386eb5fa27bc863b510b6cb507ca94e8bdd19dc1d71ceb7ab836908f9853f16f2a00a96e565731dd0a11ca4476a9a2750102ca8298f1b27747daf814b57175

    • SSDEEP

      6144:ZO8HpKGKYUI6KW5NMwvQdKdnsxYAd3NWEtfnlpoAu92AHqkNoin4j3OLNChqOhWQ:ZO8Hp8KFdKdnav3N5luA82iDNDnZ3j

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks