Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2aea95d7b9293a521467cddb1f60d49dc0414ce5363b7474a3861967cfe26ec5
-
Size
1.0MB
-
Sample
241111-brhtesymcw
-
MD5
6f2f60870f54677c8abc465951bfa97a
-
SHA1
04f5e7a323d9e9ae4cace6db5f77b407ef71a938
-
SHA256
2aea95d7b9293a521467cddb1f60d49dc0414ce5363b7474a3861967cfe26ec5
-
SHA512
3b94fc45c634133ccfca85553406c76b8195fe319b437c70dada905c9415bad321222763e003130dbb8e96db473fb27cf6a9e37281d984730d7b35d1aa67e5e5
-
SSDEEP
24576:hye19Mg4rpZ0j9tE78PLy+ravKruEdCpnEqxBc2:Ue1qTrv8y78z+HEcpEp
Static task
static1
Behavioral task
behavioral1
Sample
2aea95d7b9293a521467cddb1f60d49dc0414ce5363b7474a3861967cfe26ec5.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2aea95d7b9293a521467cddb1f60d49dc0414ce5363b7474a3861967cfe26ec5
-
Size
1.0MB
-
MD5
6f2f60870f54677c8abc465951bfa97a
-
SHA1
04f5e7a323d9e9ae4cace6db5f77b407ef71a938
-
SHA256
2aea95d7b9293a521467cddb1f60d49dc0414ce5363b7474a3861967cfe26ec5
-
SHA512
3b94fc45c634133ccfca85553406c76b8195fe319b437c70dada905c9415bad321222763e003130dbb8e96db473fb27cf6a9e37281d984730d7b35d1aa67e5e5
-
SSDEEP
24576:hye19Mg4rpZ0j9tE78PLy+ravKruEdCpnEqxBc2:Ue1qTrv8y78z+HEcpEp
-
Detects Healer an antivirus disabler dropper
-
Healer family
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1