Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3a624e7c7d5d4ef86bbf0e40b6e4312104ffb2e8c95c9c9e81999aaa89ca71ec

  • Size

    2.5MB

  • Sample

    221031-b52hpahhg2

  • MD5

    1d59f656530b2d362f5d540122fb2d03

  • SHA1

    c6af89f5402210c13ac67d4fc081b015a98c0959

  • SHA256

    3a624e7c7d5d4ef86bbf0e40b6e4312104ffb2e8c95c9c9e81999aaa89ca71ec

  • SHA512

    5065db582a0de1b319c25c67c40cfaff8a5240b4fc7f0dec9a7d1eac9ffaefef1f6923085a5ebcec07c91e3fdc7ff6e755847dc2e2bb27786477add0d8cf7094

  • SSDEEP

    24576:SxHh9tivm4GY2YlYFBcFuDMGed39+aV0obd3Ve6hGpa3ibCtLHfs25dehl3RuQ5m:Sv9wvmmkJSd3gpuibCtTZdQl3U

Score
10/10

Malware Config

Extracted

Family

redline

C2

45.150.108.67:80

Attributes
  • auth_value

    a0249d7bd1134f8f7f9d67e72afd4b00

Targets

    • Target

      3a624e7c7d5d4ef86bbf0e40b6e4312104ffb2e8c95c9c9e81999aaa89ca71ec

    • Size

      2.5MB

    • MD5

      1d59f656530b2d362f5d540122fb2d03

    • SHA1

      c6af89f5402210c13ac67d4fc081b015a98c0959

    • SHA256

      3a624e7c7d5d4ef86bbf0e40b6e4312104ffb2e8c95c9c9e81999aaa89ca71ec

    • SHA512

      5065db582a0de1b319c25c67c40cfaff8a5240b4fc7f0dec9a7d1eac9ffaefef1f6923085a5ebcec07c91e3fdc7ff6e755847dc2e2bb27786477add0d8cf7094

    • SSDEEP

      24576:SxHh9tivm4GY2YlYFBcFuDMGed39+aV0obd3Ve6hGpa3ibCtLHfs25dehl3RuQ5m:Sv9wvmmkJSd3gpuibCtTZdQl3U

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks