Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

85644a9475...6N.exe

windows7-x64

10

85644a9475...6N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85644a9475c7c124a8e4b677432d193ffab0481bb84b83a680d18a4a273c2946N.exe

  • Size

    168KB

  • MD5

    aefc57311e0f88eaba767b600110a291

  • SHA1

    075aa99b21f2bd868609823c60221bd3d2fcd8aa

  • SHA256

    062e827ee46d39194a2c86799c53f1304dda2e4a0e0bb86624a1c8bd95c8363f

  • SHA512

    a850560b32724cf666cd195cb519be866e9f51f3b4d5377f84108f4030b8a264b5899dd3f893dce35be8466b68859adb4f5c8c95fabd2bd7478da1afc6fe8cc9

  • SSDEEP

    3072:uJaohQaSe5clFcb0iCKbqVsTQZxTcVL8e8h2r:uJteaSe5clhiVwxTcVL5

Score
10/10
mazdaredline

Malware Config

Extracted

Family

redline

Botnet

mazda

C2

217.196.96.56:4138

Attributes
  • auth_value

    3d2870537d84a4c6d7aeecd002871c51

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 85644a9475c7c124a8e4b677432d193ffab0481bb84b83a680d18a4a273c2946N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections