Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

c5d9fd491b...88.exe

windows7-x64

10

c5d9fd491b...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5d9fd491bc842c805fc0503f56cba88.exe

  • Size

    95KB

  • MD5

    c5d9fd491bc842c805fc0503f56cba88

  • SHA1

    41b5de0eb29bf849149267b0a58d851eaaf86e36

  • SHA256

    dff98fa2ef4c751903606f1748844898a8254e799ae572725c64d9ebdba7a28c

  • SHA512

    b395f06d01e930975889a38927325270993d915da4ec346d0763a17601fb027b0126090a0e6c64ca234c53ee2e4ae85a8b82e1e7a9d14eea7945e8a10c0c5e31

  • SSDEEP

    1536:Bqs+FRcqWClbG6jejoigI743Ywzi0Zb78ivombfexv0ujXyyed2ItmulgS6pUl:veRclyY7+zi0ZbYe1g0ujyzdEU

Score
10/10
hwidspooferredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

hwidspoofer

C2

51.89.201.52:47142

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c5d9fd491bc842c805fc0503f56cba88.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections