Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e2b1bfef3eecba44295878ccc3f9738d2265ac495c5790afd1e429452568433d
-
Size
537KB
-
Sample
241111-bz66zssqbm
-
MD5
0188463907b46021fda18694973f8ceb
-
SHA1
c0faf7a04e43849adfeb74e584295c75d6c86d66
-
SHA256
e2b1bfef3eecba44295878ccc3f9738d2265ac495c5790afd1e429452568433d
-
SHA512
7cf9bac2617cb08ec3f3a4d2979f92d1e86dab00df74262681a098edeeaa87ea27c376f8fdc9b2a175160379e146d02f5c6c1441270c4e6c092879a30756bd5e
-
SSDEEP
12288:6Mr4y90fJbVVNxks+PJc0CphTMrRQ174w08:Wy0tV7xAc0wTMrRQ174g
Static task
static1
Behavioral task
behavioral1
Sample
e2b1bfef3eecba44295878ccc3f9738d2265ac495c5790afd1e429452568433d.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
rosn
176.113.115.145:4125
-
auth_value
050a19e1db4d0024b0f23b37dcf961f4
Targets
-
-
Target
e2b1bfef3eecba44295878ccc3f9738d2265ac495c5790afd1e429452568433d
-
Size
537KB
-
MD5
0188463907b46021fda18694973f8ceb
-
SHA1
c0faf7a04e43849adfeb74e584295c75d6c86d66
-
SHA256
e2b1bfef3eecba44295878ccc3f9738d2265ac495c5790afd1e429452568433d
-
SHA512
7cf9bac2617cb08ec3f3a4d2979f92d1e86dab00df74262681a098edeeaa87ea27c376f8fdc9b2a175160379e146d02f5c6c1441270c4e6c092879a30756bd5e
-
SSDEEP
12288:6Mr4y90fJbVVNxks+PJc0CphTMrRQ174w08:Wy0tV7xAc0wTMrRQ174g
-
Detects Healer an antivirus disabler dropper
-
Healer family
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1