Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1920-154-0x0000000004AC0000-0x0000000004B04000-memory.dmp

  • Size

    272KB

  • Sample

    230322-z7jmnadd6v

  • MD5

    117e7a36e233fb8f5a9ca66da1a11904

  • SHA1

    2ebd1e390b58d214d2d2b7bcfd88ca67d18f844e

  • SHA256

    d9fb41026dc5fe22476bcac136ed8fad841b680a03c8614a5d7c5d13f10daf98

  • SHA512

    a10078e977156db5bd0cfc643570a65944678840a56d22824429d1d65ecab728ee4b7dbc5dedc6f783cd4e73b2872f199bb0b611a52d4aacc6df3543ca2e2ada

  • SSDEEP

    3072:J6j4ELN6FY9Cff3n0sk+wziR/o40DrNwAhFMnImax8EExNn2pU9f2MKTV/wi4lrO:J6jiD30sk+wzYZAhunI7x8

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      1920-154-0x0000000004AC0000-0x0000000004B04000-memory.dmp

    • Size

      272KB

    • MD5

      117e7a36e233fb8f5a9ca66da1a11904

    • SHA1

      2ebd1e390b58d214d2d2b7bcfd88ca67d18f844e

    • SHA256

      d9fb41026dc5fe22476bcac136ed8fad841b680a03c8614a5d7c5d13f10daf98

    • SHA512

      a10078e977156db5bd0cfc643570a65944678840a56d22824429d1d65ecab728ee4b7dbc5dedc6f783cd4e73b2872f199bb0b611a52d4aacc6df3543ca2e2ada

    • SSDEEP

      3072:J6j4ELN6FY9Cff3n0sk+wziR/o40DrNwAhFMnImax8EExNn2pU9f2MKTV/wi4lrO:J6jiD30sk+wzYZAhunI7x8

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.