Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c0906cc557a1d941baf5c44c93108918e4162b219c08e1ecaf406e428972a1b1
-
Size
769KB
-
Sample
241111-brxycazcrb
-
MD5
d5f36e7f809a7bd66bc99763e5f6c187
-
SHA1
81e80b9ece05cf54151f6832d1c1cff4eeca409a
-
SHA256
c0906cc557a1d941baf5c44c93108918e4162b219c08e1ecaf406e428972a1b1
-
SHA512
64af29547f9a3c76a227a7864d3c39cd0b49d35b9d66fd590393f023822482c0db024b46ffec5cd3baf29068505260074c7ac136a1ab7be41b0fa4ec484fae2a
-
SSDEEP
24576:by5kVRp4LCdSknDRLYKWTAzG5bwH5Zv4Os:O5i4LCQCeTqWmJ
Static task
static1
Behavioral task
behavioral1
Sample
c0906cc557a1d941baf5c44c93108918e4162b219c08e1ecaf406e428972a1b1.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
debro
185.161.248.75:4132
-
auth_value
18c2c191aebfde5d1787ec8d805a01a8
Targets
-
-
Target
c0906cc557a1d941baf5c44c93108918e4162b219c08e1ecaf406e428972a1b1
-
Size
769KB
-
MD5
d5f36e7f809a7bd66bc99763e5f6c187
-
SHA1
81e80b9ece05cf54151f6832d1c1cff4eeca409a
-
SHA256
c0906cc557a1d941baf5c44c93108918e4162b219c08e1ecaf406e428972a1b1
-
SHA512
64af29547f9a3c76a227a7864d3c39cd0b49d35b9d66fd590393f023822482c0db024b46ffec5cd3baf29068505260074c7ac136a1ab7be41b0fa4ec484fae2a
-
SSDEEP
24576:by5kVRp4LCdSknDRLYKWTAzG5bwH5Zv4Os:O5i4LCQCeTqWmJ
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1