Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    395KB

  • Sample

    230207-djfp7shb63

  • MD5

    7ed61df0773d87197bbe21e0f6d8e5ae

  • SHA1

    f03e5f08c58922c2f1141b1c83f71334fd158735

  • SHA256

    0d508393e05d4d39c96b797330f892cedaa7b563a32e36ff6bcd6bc2d6423421

  • SHA512

    e53edcd4fb01c009708035eac4bf1cd09b1cc1fb9396a42a18ebf731dca46c78924a3cfe72c263efb12f20d148a5e05d77cc0d937df711a652e483fc302cdd51

  • SSDEEP

    6144:ASrL490uvdT4khgpHhzRTNuhtTIb/+SAR3Yu/WZqTuQj9+dJa:xrM2u1TxgxxNNuvGWSGYu/WZqTljOJ

Malware Config

Targets

    • Target

      file.exe

    • Size

      395KB

    • MD5

      7ed61df0773d87197bbe21e0f6d8e5ae

    • SHA1

      f03e5f08c58922c2f1141b1c83f71334fd158735

    • SHA256

      0d508393e05d4d39c96b797330f892cedaa7b563a32e36ff6bcd6bc2d6423421

    • SHA512

      e53edcd4fb01c009708035eac4bf1cd09b1cc1fb9396a42a18ebf731dca46c78924a3cfe72c263efb12f20d148a5e05d77cc0d937df711a652e483fc302cdd51

    • SSDEEP

      6144:ASrL490uvdT4khgpHhzRTNuhtTIb/+SAR3Yu/WZqTuQj9+dJa:xrM2u1TxgxxNNuvGWSGYu/WZqTljOJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks