Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
adab32732d0c45145b9884e60531564809bf49baf8b15d1a62106275758162b3
-
Size
408KB
-
Sample
241104-rtjfqs1gpj
-
MD5
04d2ac1b567402958032b8a0d479f609
-
SHA1
9e9588b89ce93c743e4a8dfe7925325a07cd8386
-
SHA256
adab32732d0c45145b9884e60531564809bf49baf8b15d1a62106275758162b3
-
SHA512
252746070c759594d1f998b1739b80841c7ed7254793018091b5f392fbd00daca743827bd78eb3cf77c46ec3a6f46dc521f5db56e536d6447f32130cbbf8b10d
-
SSDEEP
6144:KFy+bnr+Zp0yN90QEnZe9PvWsoQO9Q6qtP1JWYmzBbmayjxqpTsF1s:vMrdy90NEY2tnfmzBb61qpIF1s
Static task
static1
Behavioral task
behavioral1
Sample
adab32732d0c45145b9884e60531564809bf49baf8b15d1a62106275758162b3.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
fud
193.233.20.27:4123
-
auth_value
cddc991efd6918ad5321d80dac884b40
Targets
-
-
Target
adab32732d0c45145b9884e60531564809bf49baf8b15d1a62106275758162b3
-
Size
408KB
-
MD5
04d2ac1b567402958032b8a0d479f609
-
SHA1
9e9588b89ce93c743e4a8dfe7925325a07cd8386
-
SHA256
adab32732d0c45145b9884e60531564809bf49baf8b15d1a62106275758162b3
-
SHA512
252746070c759594d1f998b1739b80841c7ed7254793018091b5f392fbd00daca743827bd78eb3cf77c46ec3a6f46dc521f5db56e536d6447f32130cbbf8b10d
-
SSDEEP
6144:KFy+bnr+Zp0yN90QEnZe9PvWsoQO9Q6qtP1JWYmzBbmayjxqpTsF1s:vMrdy90NEY2tnfmzBb61qpIF1s
-
Detects Healer an antivirus disabler dropper
-
Healer family
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1