Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3a2458322c0c6597215b925aff8db03d75a5677f861152b7e6efc9198edf3864
-
Size
338KB
-
Sample
230203-bjcbnscg8w
-
MD5
8bc47a83b70b7440cdf472ffb141a83f
-
SHA1
5d1fc0f499be6f3ddeac23677cf31e1cdf0b80b9
-
SHA256
3a2458322c0c6597215b925aff8db03d75a5677f861152b7e6efc9198edf3864
-
SHA512
306eaa1371dbc214f3b34574ff77ebb5081fb3e748e3b47660a3186b5c079958e2ee7cf600409c31b89412c4665c9c922d776c3e8d747760e9a312314d3243ba
-
SSDEEP
6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H
Malware Config
Extracted
redline
24.01
37.220.86.164:29170
-
auth_value
1c7f0aa21138601b5201a3a4a0123991
Targets
-
-
Target
3a2458322c0c6597215b925aff8db03d75a5677f861152b7e6efc9198edf3864
-
Size
338KB
-
MD5
8bc47a83b70b7440cdf472ffb141a83f
-
SHA1
5d1fc0f499be6f3ddeac23677cf31e1cdf0b80b9
-
SHA256
3a2458322c0c6597215b925aff8db03d75a5677f861152b7e6efc9198edf3864
-
SHA512
306eaa1371dbc214f3b34574ff77ebb5081fb3e748e3b47660a3186b5c079958e2ee7cf600409c31b89412c4665c9c922d776c3e8d747760e9a312314d3243ba
-
SSDEEP
6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-