Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
11/11/2024, 02:11
General
-
Target
8165b268caadde201f7ea049f56e8dd7ee77f80f50e44dc29fe481b15addedd3.exe
-
Size
276KB
-
MD5
71fdaa64885cba62914a473afd2470e6
-
SHA1
06ac98cd0cf0f468d80fe8f7dd6b67b13bf61a73
-
SHA256
8165b268caadde201f7ea049f56e8dd7ee77f80f50e44dc29fe481b15addedd3
-
SHA512
eae30de1c038f804b8f9c5625375bd378859b2f14c6b8b84955521331deaceeb4b986fa4ea0e1be49095b7706bfd09d7feaf1a4b2287ee495e5e3a45dc71bdea
-
SSDEEP
6144:m7oRXlwn+N7WWkVs+EKrPwt/m+HLw9lXWZ8P45ORUN3:QoHw+AWkGKrw/dSq8PcOR
Malware Config
Extracted
redline
ruzki
193.106.191.165:39482
-
auth_value
71a0558c0eea274a5bd617ea85786884
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 35 IoCs
-
Redline family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8165b268caadde201f7ea049f56e8dd7ee77f80f50e44dc29fe481b15addedd3.exe"C:\Users\Admin\AppData\Local\Temp\8165b268caadde201f7ea049f56e8dd7ee77f80f50e44dc29fe481b15addedd3.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
236KB
-
Filesize
200KB
-
Filesize
32.8MB
-
Filesize
32.8MB
-
Filesize
192KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
1024KB
-
Filesize
236KB