Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2b764a9c92...58.exe

windows7-x64

10

2b764a9c92...58.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2b764a9c9295b0a7a15957adc94ddfe5d86c9b5bdedd880a491d5cbfad4e9258

  • Size

    394KB

  • Sample

    241109-szfsgaxdjj

  • MD5

    fafae8a41bd01582cec4f67d0219d1d5

  • SHA1

    c59bdea85ce408e1ea34e9685d564f8022190e47

  • SHA256

    2b764a9c9295b0a7a15957adc94ddfe5d86c9b5bdedd880a491d5cbfad4e9258

  • SHA512

    b492a6fd034ea3e457f69f0ef67d9afb0b51da6bbc50a01bd58ca2a0f52b8c1d952a740dddf9d7f41a3968479dfac036718a6f44f9d6a043eaf2166c7fb1a229

  • SSDEEP

    6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

Score
10/10
redline1discoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2b764a9c9295b0a7a15957adc94ddfe5d86c9b5bdedd880a491d5cbfad4e9258

    • Size

      394KB

    • MD5

      fafae8a41bd01582cec4f67d0219d1d5

    • SHA1

      c59bdea85ce408e1ea34e9685d564f8022190e47

    • SHA256

      2b764a9c9295b0a7a15957adc94ddfe5d86c9b5bdedd880a491d5cbfad4e9258

    • SHA512

      b492a6fd034ea3e457f69f0ef67d9afb0b51da6bbc50a01bd58ca2a0f52b8c1d952a740dddf9d7f41a3968479dfac036718a6f44f9d6a043eaf2166c7fb1a229

    • SSDEEP

      6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s

    Score
    10/10
    redline1discoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks