Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
24d512fa05d2d5c5330be84a58526c74221fba38cc6993cee31acf645dfd50dc.exe
-
Size
3.0MB
-
Sample
240613-scxsgatdld
-
MD5
1cecb25d5fe1f38d7b14353a2a14bf79
-
SHA1
7c9934b8111267b9e615917cd8fcb73398e98972
-
SHA256
24d512fa05d2d5c5330be84a58526c74221fba38cc6993cee31acf645dfd50dc
-
SHA512
82b76bc9b11a3d99b7b2d538ffeeeb0e674fc36d52ce975690c3485a843a687fe6f2a89baf354e8e41b2a076c09dd14b258025359915689f8c3acdfa6abf29b7
-
SSDEEP
49152:J/FZcUfaYBmWzQvoMxyPvBpWI0y2gA3uJV5C+CM0GNiGUXqC3q81vK1GEtrXbLoK:1IUCYBmoQvbPIy2z5PWGNnqvuG4X/
Behavioral task
behavioral1
Sample
24d512fa05d2d5c5330be84a58526c74221fba38cc6993cee31acf645dfd50dc.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
24d512fa05d2d5c5330be84a58526c74221fba38cc6993cee31acf645dfd50dc.exe
-
Size
3.0MB
-
MD5
1cecb25d5fe1f38d7b14353a2a14bf79
-
SHA1
7c9934b8111267b9e615917cd8fcb73398e98972
-
SHA256
24d512fa05d2d5c5330be84a58526c74221fba38cc6993cee31acf645dfd50dc
-
SHA512
82b76bc9b11a3d99b7b2d538ffeeeb0e674fc36d52ce975690c3485a843a687fe6f2a89baf354e8e41b2a076c09dd14b258025359915689f8c3acdfa6abf29b7
-
SSDEEP
49152:J/FZcUfaYBmWzQvoMxyPvBpWI0y2gA3uJV5C+CM0GNiGUXqC3q81vK1GEtrXbLoK:1IUCYBmoQvbPIy2z5PWGNnqvuG4X/
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
SectopRAT payload
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-