Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3

  • Size

    137KB

  • Sample

    230211-jpxtkahe77

  • MD5

    db63697545fac07e9595cb8cfc194d4f

  • SHA1

    e91258f719dd8873cec09d902e354acf18beb533

  • SHA256

    4dbcbc28f7f159d28fed9be04c4f6b27610d62fef825a9083a46522a17c7db87

  • SHA512

    80daa955d681cb828dd1d232529d48a75ef73d40b939889c37ccff561123ec6221b83a79d7c7d668ee0921ffb0a83f7a6168893b1c1b34bb3afa14d5cde5f0db

  • SSDEEP

    3072:2YO/ZMTF+d+Io4TImWnZ7OPuJ9WWFiyYP8hASS46v:2YMZMB+dLoPjnNtWAA8hi

Malware Config

Extracted

Family

redline

Botnet

MILLIONBAKS

C2

195.201.122.190:40127

Attributes
  • auth_value

    4936a4b785b5f463bbe10202e0ae4554

Targets

    • Target

      3

    • Size

      137KB

    • MD5

      db63697545fac07e9595cb8cfc194d4f

    • SHA1

      e91258f719dd8873cec09d902e354acf18beb533

    • SHA256

      4dbcbc28f7f159d28fed9be04c4f6b27610d62fef825a9083a46522a17c7db87

    • SHA512

      80daa955d681cb828dd1d232529d48a75ef73d40b939889c37ccff561123ec6221b83a79d7c7d668ee0921ffb0a83f7a6168893b1c1b34bb3afa14d5cde5f0db

    • SSDEEP

      3072:2YO/ZMTF+d+Io4TImWnZ7OPuJ9WWFiyYP8hASS46v:2YMZMB+dLoPjnNtWAA8hi

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks