Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
7609a7d901338139b8209f1c9e1e11a9496f87dcbea4f6b0ccb0e6f49e6a11a5
-
Size
501KB
-
Sample
240509-23rhtacb4t
-
MD5
d50c6a922e0c314d6a17e26a8dce4278
-
SHA1
68bb17b90f03bbc52ff9e6329764285e6b9de5a8
-
SHA256
7609a7d901338139b8209f1c9e1e11a9496f87dcbea4f6b0ccb0e6f49e6a11a5
-
SHA512
09aa848a2a760c6958c5415d268d9f3201180df92af061f1f5ae371b54ea6818bbc3ef0027188470102164171aff92b636a5d6f1ab4a1ced976bdf6e0d4f0134
-
SSDEEP
12288:5ZJQdCWmX3jfaw5vm/nE26V42ghBePfJ6VlbDByL98V:zedCWCn9m/nB6yIB6Pb4Z+
Static task
static1
Behavioral task
behavioral1
Sample
7609a7d901338139b8209f1c9e1e11a9496f87dcbea4f6b0ccb0e6f49e6a11a5.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7609a7d901338139b8209f1c9e1e11a9496f87dcbea4f6b0ccb0e6f49e6a11a5.exe
Resource
win10-20240404-en
Malware Config
Extracted
redline
LogsDiller Cloud (TG: @logsdillabot)
5.42.65.96:28380
Targets
-
-
Target
7609a7d901338139b8209f1c9e1e11a9496f87dcbea4f6b0ccb0e6f49e6a11a5
-
Size
501KB
-
MD5
d50c6a922e0c314d6a17e26a8dce4278
-
SHA1
68bb17b90f03bbc52ff9e6329764285e6b9de5a8
-
SHA256
7609a7d901338139b8209f1c9e1e11a9496f87dcbea4f6b0ccb0e6f49e6a11a5
-
SHA512
09aa848a2a760c6958c5415d268d9f3201180df92af061f1f5ae371b54ea6818bbc3ef0027188470102164171aff92b636a5d6f1ab4a1ced976bdf6e0d4f0134
-
SSDEEP
12288:5ZJQdCWmX3jfaw5vm/nE26V42ghBePfJ6VlbDByL98V:zedCWCn9m/nB6yIB6Pb4Z+
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext
-