Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ee15e18baf8d9726fab400c01b678c47cd0c02c04f857eec8f58bc4d7daf248a

  • Size

    292KB

  • Sample

    230327-17q76she7t

  • MD5

    65a08ffc4bdb323b6899ae9737f747f6

  • SHA1

    6a7fa5c964ab7548ce8492d3374bc346dbf13839

  • SHA256

    ee15e18baf8d9726fab400c01b678c47cd0c02c04f857eec8f58bc4d7daf248a

  • SHA512

    ea5443621fdc13634b0503aa830eba4a6c612ce772da25f005e14e9e6671324b1a0b0f026c136ffc1a04e11028646245d6d28b3d171c06416af0d66fba544b40

  • SSDEEP

    6144:JZ5UN3ALaT+qAvDwgCzJ5vIwjs5WIQuqg:JXUN3ALaxAaLjAQ

Score
10/10

Malware Config

Extracted

Family

redline

C2

135.181.173.163:4323

Attributes
  • auth_value

    a909e2aaecf96137978fea4f86400b9b

Targets

    • Target

      ee15e18baf8d9726fab400c01b678c47cd0c02c04f857eec8f58bc4d7daf248a

    • Size

      292KB

    • MD5

      65a08ffc4bdb323b6899ae9737f747f6

    • SHA1

      6a7fa5c964ab7548ce8492d3374bc346dbf13839

    • SHA256

      ee15e18baf8d9726fab400c01b678c47cd0c02c04f857eec8f58bc4d7daf248a

    • SHA512

      ea5443621fdc13634b0503aa830eba4a6c612ce772da25f005e14e9e6671324b1a0b0f026c136ffc1a04e11028646245d6d28b3d171c06416af0d66fba544b40

    • SSDEEP

      6144:JZ5UN3ALaT+qAvDwgCzJ5vIwjs5WIQuqg:JXUN3ALaxAaLjAQ

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks