Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1aac4153ab3c582dd44958df164822f5179606e21e4e3e179a72709d9c999792

  • Size

    297KB

  • Sample

    230301-l71paafc41

  • MD5

    b4e46cb20d99fbe0e84d14189042dcec

  • SHA1

    04c2df3ad7344eb3e55ef48795f1c75a85c049fa

  • SHA256

    1aac4153ab3c582dd44958df164822f5179606e21e4e3e179a72709d9c999792

  • SHA512

    0724a1274e85a0fef82db14006a16b342dae3b60aaee3622c1da546f69da22252a1b82f88e296407372fd0cb604de0f41f8fe6e2857ec9248885a1338346134f

  • SSDEEP

    6144:+Xz/ugbzUl2AlML93TrZpekCgKVUoYVd+An:+Xz/tzUl/CTpFCZxYDl

Malware Config

Targets

    • Target

      1aac4153ab3c582dd44958df164822f5179606e21e4e3e179a72709d9c999792

    • Size

      297KB

    • MD5

      b4e46cb20d99fbe0e84d14189042dcec

    • SHA1

      04c2df3ad7344eb3e55ef48795f1c75a85c049fa

    • SHA256

      1aac4153ab3c582dd44958df164822f5179606e21e4e3e179a72709d9c999792

    • SHA512

      0724a1274e85a0fef82db14006a16b342dae3b60aaee3622c1da546f69da22252a1b82f88e296407372fd0cb604de0f41f8fe6e2857ec9248885a1338346134f

    • SSDEEP

      6144:+Xz/ugbzUl2AlML93TrZpekCgKVUoYVd+An:+Xz/tzUl/CTpFCZxYDl

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks