Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c021c9c39eb9129916a5ed2cad370bbe.exe

  • Size

    373KB

  • Sample

    230302-wjkm9sdf8s

  • MD5

    c021c9c39eb9129916a5ed2cad370bbe

  • SHA1

    655d22c01a759094984b062b05d43dbcdcb22d9a

  • SHA256

    697341461993ea5a75936c40d11974ea7509fb895b779e978a7fbb402d28d01d

  • SHA512

    2fe7129677524dce08d9e64a18b22fde0e7dfa487592fa7cc2726b1b0ba58e0d6c619e9bd949edc7eadeca8d5b42c215ac3f6d94bdf1f2c97c935b2706d8b6ae

  • SSDEEP

    6144:p0ay3LzgrOzHu2LBNDd0Uwg0BHaK87RpeNnAsXRZ+9n:pQ3vgrOzHDNPNXeZ8

Malware Config

Targets

    • Target

      c021c9c39eb9129916a5ed2cad370bbe.exe

    • Size

      373KB

    • MD5

      c021c9c39eb9129916a5ed2cad370bbe

    • SHA1

      655d22c01a759094984b062b05d43dbcdcb22d9a

    • SHA256

      697341461993ea5a75936c40d11974ea7509fb895b779e978a7fbb402d28d01d

    • SHA512

      2fe7129677524dce08d9e64a18b22fde0e7dfa487592fa7cc2726b1b0ba58e0d6c619e9bd949edc7eadeca8d5b42c215ac3f6d94bdf1f2c97c935b2706d8b6ae

    • SSDEEP

      6144:p0ay3LzgrOzHu2LBNDd0Uwg0BHaK87RpeNnAsXRZ+9n:pQ3vgrOzHDNPNXeZ8

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks