Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    de948d641f21b845e2bd9c7ea296cbbe.bin

  • Size

    240KB

  • Sample

    230211-b8vvbabc7v

  • MD5

    56a3b1ab8998b383ff50354ca0274656

  • SHA1

    8117aaa92f79e4ce39d993c70f27a707446ae50d

  • SHA256

    75fb1b009d99e91f508e70d7c2b2b37ac0cf04f1a53b55c55c6696325aa548eb

  • SHA512

    ffe2f380255a2d33836d4cd2f3acc83fc4d58335b4d0a498ea1abfdbbd5ada2fa88b25d076ac41df3e5f2db995ac476645eeb71c4bb561fb9a0d7eb94cbc8370

  • SSDEEP

    3072:Gll/Y6WEXPOdBV54Jn6I7e2FLfCccOyHlIcD0unskc9LyRrPCe4OgaTIzx2R2PiB:C44hb3FCnSurgLYr8xxCWiNbn

Malware Config

Targets

    • Target

      a73fe13dbba080dfb86b8c6af0cf91458dcb8a0ac0bc41b6078895c1ab8a7a2e.exe

    • Size

      299KB

    • MD5

      de948d641f21b845e2bd9c7ea296cbbe

    • SHA1

      d5071572f830cffd966d58271a59c53d58d19274

    • SHA256

      a73fe13dbba080dfb86b8c6af0cf91458dcb8a0ac0bc41b6078895c1ab8a7a2e

    • SHA512

      fef6ac30225338e62923401db3b143595543cc05cd0867e770348ee30f4fb67a64b82b543c2c61ac0f9e807202a858787fffea0c823bf66fcfe6a0b8944efcd9

    • SSDEEP

      6144:YFVR9yhRXAEYY2hH7xVPW8BiKAjwsV5/uPR2npH8Ar6zOidBqsXDOSa9p:YFVm7X6Y2hHjPWNKAks7/uupHPrqOi5D

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks