Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7bb0c8f7ad2f5519b34da2d3df4fc65ce690b1825d6fc5706716ebf5ea5bf5a3

  • Size

    292KB

  • Sample

    230327-17e5xahe6y

  • MD5

    172402b1322ff83dfcc705a38ec79b25

  • SHA1

    936f59fa30cb210ef20ed3d03e07761ffe3c9039

  • SHA256

    7bb0c8f7ad2f5519b34da2d3df4fc65ce690b1825d6fc5706716ebf5ea5bf5a3

  • SHA512

    18c48d1388f379aa272108e10d285250b651bcbdd9f97a5339ba88845fcf8e06541f3c52c0c4427b751d849fe920461f1aac891cfa786700e296305c5364520d

  • SSDEEP

    6144:JFdYUN3ALaW+qAvDwgvoR8s5ziPKiHrrqg:JHYUN3ALa+AqWPVH

Score
10/10

Malware Config

Extracted

Family

redline

C2

135.181.173.163:4323

Attributes
  • auth_value

    a909e2aaecf96137978fea4f86400b9b

Targets

    • Target

      7bb0c8f7ad2f5519b34da2d3df4fc65ce690b1825d6fc5706716ebf5ea5bf5a3

    • Size

      292KB

    • MD5

      172402b1322ff83dfcc705a38ec79b25

    • SHA1

      936f59fa30cb210ef20ed3d03e07761ffe3c9039

    • SHA256

      7bb0c8f7ad2f5519b34da2d3df4fc65ce690b1825d6fc5706716ebf5ea5bf5a3

    • SHA512

      18c48d1388f379aa272108e10d285250b651bcbdd9f97a5339ba88845fcf8e06541f3c52c0c4427b751d849fe920461f1aac891cfa786700e296305c5364520d

    • SSDEEP

      6144:JFdYUN3ALaW+qAvDwgvoR8s5ziPKiHrrqg:JHYUN3ALa+AqWPVH

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks