Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

23/03/2023, 17:02

230323-vkk5raha57 10

23/03/2023, 17:00

230323-vh1gnaha48 1

General

  • Target

    https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbllaU1FSMnJWZnA0THJLYjhqdzJhZ1NSLVRPZ3xBQ3Jtc0tsQmVMcUllWVdtXzRiMUdDeGg4MXQxM0xaT2tWaHhGS29NUW1HOENndV9oSlduRDdTcHVWNDF2ZUNwMWRFQzJsMjBOaTJLTVNCZUEyOTdsal91dE9sdDlxU0Y2NFZ0MGRDb3BJN3FyVmgyakc0RDAxZw&q=https%3A%2F%2Ftelegra.ph%2FMega-Hack-V71-03-14&v=yUUSpUapcPc

  • Sample

    230323-vkk5raha57

Malware Config

Extracted

Family

redline

Botnet

@FoticeAnalize

C2

37.220.87.8:42823

Attributes
  • auth_value

    5b94c26d41778465fc92ca97325b6cfb

Targets

    • Target

      https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbllaU1FSMnJWZnA0THJLYjhqdzJhZ1NSLVRPZ3xBQ3Jtc0tsQmVMcUllWVdtXzRiMUdDeGg4MXQxM0xaT2tWaHhGS29NUW1HOENndV9oSlduRDdTcHVWNDF2ZUNwMWRFQzJsMjBOaTJLTVNCZUEyOTdsal91dE9sdDlxU0Y2NFZ0MGRDb3BJN3FyVmgyakc0RDAxZw&q=https%3A%2F%2Ftelegra.ph%2FMega-Hack-V71-03-14&v=yUUSpUapcPc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks