Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    CACF8655A767034B75770412018127F044B6543A6432B.exe

  • Size

    404KB

  • Sample

    221007-vjjkjadbbq

  • MD5

    c3401b50b3b292190403579fc6322d1a

  • SHA1

    abf34a111a328bc7605f0d12d5906ea0630afa27

  • SHA256

    cacf8655a767034b75770412018127f044b6543a6432b9d616042a5385dd062d

  • SHA512

    6b5183393fed60ce7b58c69f7a1f43b106cddf548ae3d97d431cdf4a4c21b2b24edf4f45bd610112a4eac339aeb6299368abd754f9ba67610df1b1087c3c929a

  • SSDEEP

    12288:orm6+9Ogo3md7AUuxk39R17uIhIp2VZc:I+pyw39R17u72

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

787

C2

linevanarsor.xyz:80

Attributes
  • auth_value

    25cd5ed9d70109d59cc46eeda8034e2b

Targets

    • Target

      CACF8655A767034B75770412018127F044B6543A6432B.exe

    • Size

      404KB

    • MD5

      c3401b50b3b292190403579fc6322d1a

    • SHA1

      abf34a111a328bc7605f0d12d5906ea0630afa27

    • SHA256

      cacf8655a767034b75770412018127f044b6543a6432b9d616042a5385dd062d

    • SHA512

      6b5183393fed60ce7b58c69f7a1f43b106cddf548ae3d97d431cdf4a4c21b2b24edf4f45bd610112a4eac339aeb6299368abd754f9ba67610df1b1087c3c929a

    • SSDEEP

      12288:orm6+9Ogo3md7AUuxk39R17uIhIp2VZc:I+pyw39R17u72

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks