Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

b9b4e33fb3...b4.exe

windows7-x64

10

b9b4e33fb3...b4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b9b4e33fb34c2aa2078ab419d91932c9656f380479488e1a34a00435f7a1a0b4.exe

  • Size

    168KB

  • MD5

    72361c8c159254d18d771bfef4230d99

  • SHA1

    7e75555d91c8397386a7a58c6f8cad7aa83f4262

  • SHA256

    b9b4e33fb34c2aa2078ab419d91932c9656f380479488e1a34a00435f7a1a0b4

  • SHA512

    a1f823e879dedbf1d7dffbfaf41e15230200fb1a06e221e09ce4625b2b1aa61b54bac0dc53c2c5d0db60b79efeb22f1e52ddabe3a99a05eab29fb7a14d6ecc6a

  • SSDEEP

    3072:uJaohQaSe5clFcb0iCKbqVsTQZxTcVL8e8h2d:uJteaSe5clhiVwxTcVLr

Score
10/10
mazdaredline

Malware Config

Extracted

Family

redline

Botnet

mazda

C2

217.196.96.56:4138

Attributes
  • auth_value

    3d2870537d84a4c6d7aeecd002871c51

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b9b4e33fb34c2aa2078ab419d91932c9656f380479488e1a34a00435f7a1a0b4.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections