Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    286KB

  • Sample

    230212-lg25escc79

  • MD5

    30c8abbc7beceae58e51c5e8bdde1e88

  • SHA1

    5917f8083aa7b6ead9b98073a78f5fc6f1317f52

  • SHA256

    c2b525e18a10330b3782a88fd5ec8519e4e25153e7b0acc868a56edcccde4661

  • SHA512

    3074bf584eec5e295bb53a9bc5cf8348e47db8c571e0cdc56a698b2ae3c707a3d1e2eb039b3c1da6374ed85557c72ac163ba917393d11d3d98875ac28aae49a8

  • SSDEEP

    3072:Hbp4+F4SRsJqnR2iMA97HIcAwiG7kWUsrfqvNtD9I700WXP3SEs/2g0ZaGsdoNQi:7a/uOMbSnWUmqvnJI+P3ShV3doNQ

Malware Config

Targets

    • Target

      file.exe

    • Size

      286KB

    • MD5

      30c8abbc7beceae58e51c5e8bdde1e88

    • SHA1

      5917f8083aa7b6ead9b98073a78f5fc6f1317f52

    • SHA256

      c2b525e18a10330b3782a88fd5ec8519e4e25153e7b0acc868a56edcccde4661

    • SHA512

      3074bf584eec5e295bb53a9bc5cf8348e47db8c571e0cdc56a698b2ae3c707a3d1e2eb039b3c1da6374ed85557c72ac163ba917393d11d3d98875ac28aae49a8

    • SSDEEP

      3072:Hbp4+F4SRsJqnR2iMA97HIcAwiG7kWUsrfqvNtD9I700WXP3SEs/2g0ZaGsdoNQi:7a/uOMbSnWUmqvnJI+P3ShV3doNQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks