Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2059bf434bb6655185f0140c5f25facbb44c62581657e4e04acad54d9fbb2452

  • Size

    286KB

  • Sample

    230304-g4qbxsda75

  • MD5

    0bd648781ab18e4dd2afe13e73aa9d2f

  • SHA1

    555fbb36dce79245f0510bd8f96b5aee92e2b47d

  • SHA256

    2059bf434bb6655185f0140c5f25facbb44c62581657e4e04acad54d9fbb2452

  • SHA512

    a8a2adde5933cb94984198de834fff933e0d43803b55b112358736f2aee38391d225cadf97401099546b4c7496067e070eb0050426d6f2b2ade02b5d2141d8eb

  • SSDEEP

    6144:vNT1xWVXI5JGfWZOTmD6vtdHt6ZsfPIifCzjQbKLzAMS2ILTj:vNz8XIfG8A9vtNt6sfPnGJf6lj

Malware Config

Targets

    • Target

      2059bf434bb6655185f0140c5f25facbb44c62581657e4e04acad54d9fbb2452

    • Size

      286KB

    • MD5

      0bd648781ab18e4dd2afe13e73aa9d2f

    • SHA1

      555fbb36dce79245f0510bd8f96b5aee92e2b47d

    • SHA256

      2059bf434bb6655185f0140c5f25facbb44c62581657e4e04acad54d9fbb2452

    • SHA512

      a8a2adde5933cb94984198de834fff933e0d43803b55b112358736f2aee38391d225cadf97401099546b4c7496067e070eb0050426d6f2b2ade02b5d2141d8eb

    • SSDEEP

      6144:vNT1xWVXI5JGfWZOTmD6vtdHt6ZsfPIifCzjQbKLzAMS2ILTj:vNz8XIfG8A9vtNt6sfPnGJf6lj

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks