Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbllaU1FSMnJWZnA0THJLYjhqdzJhZ1NSLVRPZ3xBQ3Jtc0tsQmVMcUllWVdtXzRiMUdDeGg4MXQxM0xaT2tWaHhGS29NUW1HOENndV9oSlduRDdTcHVWNDF2ZUNwMWRFQzJsMjBOaTJLTVNCZUEyOTdsal91dE9sdDlxU0Y2NFZ0MGRDb3BJN3FyVmgyakc0RDAxZw&q=https%3A%2F%2Ftelegra.ph%2FMega-Hack-V71-03-14&v=yUUSpUapcPc
-
Sample
230323-vkk5raha57
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbllaU1FSMnJWZnA0THJLYjhqdzJhZ1NSLVRPZ3xBQ3Jtc0tsQmVMcUllWVdtXzRiMUdDeGg4MXQxM0xaT2tWaHhGS29NUW1HOENndV9oSlduRDdTcHVWNDF2ZUNwMWRFQzJsMjBOaTJLTVNCZUEyOTdsal91dE9sdDlxU0Y2NFZ0MGRDb3BJN3FyVmgyakc0RDAxZw&q=https%3A%2F%2Ftelegra.ph%2FMega-Hack-V71-03-14&v=yUUSpUapcPc
Resource
win10v2004-20230220-es
Malware Config
Extracted
redline
@FoticeAnalize
37.220.87.8:42823
-
auth_value
5b94c26d41778465fc92ca97325b6cfb
Targets
-
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbllaU1FSMnJWZnA0THJLYjhqdzJhZ1NSLVRPZ3xBQ3Jtc0tsQmVMcUllWVdtXzRiMUdDeGg4MXQxM0xaT2tWaHhGS29NUW1HOENndV9oSlduRDdTcHVWNDF2ZUNwMWRFQzJsMjBOaTJLTVNCZUEyOTdsal91dE9sdDlxU0Y2NFZ0MGRDb3BJN3FyVmgyakc0RDAxZw&q=https%3A%2F%2Ftelegra.ph%2FMega-Hack-V71-03-14&v=yUUSpUapcPc
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-