Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    300KB

  • Sample

    230215-p87qrsbe8y

  • MD5

    057c32b901f641a462178bd18dc029d5

  • SHA1

    7a268f19eedf13ce19ca9b64bb9b082d66adc89f

  • SHA256

    6fbfc3acb6876f55bc017ff524638216bbe47cdd8ecc3875a79e759587b037b0

  • SHA512

    6d18683f3432afdb82cc5f9b7e10ebf23f81d7fa1daa69db152e2f6233e4df96cdce2103dc4fa88dad4a4422aaa71e551f990b10edddc9c972e00bcbd35391ee

  • SSDEEP

    6144:OwHoM0s2IPQF6MZzAJzIZMTkFZX66hed++4:OwL2IuZsJ8Z3X6Qet

Malware Config

Targets

    • Target

      file.exe

    • Size

      300KB

    • MD5

      057c32b901f641a462178bd18dc029d5

    • SHA1

      7a268f19eedf13ce19ca9b64bb9b082d66adc89f

    • SHA256

      6fbfc3acb6876f55bc017ff524638216bbe47cdd8ecc3875a79e759587b037b0

    • SHA512

      6d18683f3432afdb82cc5f9b7e10ebf23f81d7fa1daa69db152e2f6233e4df96cdce2103dc4fa88dad4a4422aaa71e551f990b10edddc9c972e00bcbd35391ee

    • SSDEEP

      6144:OwHoM0s2IPQF6MZzAJzIZMTkFZX66hed++4:OwL2IuZsJ8Z3X6Qet

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks