Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

25/04/2023, 21:52

230425-1q673ada87 6

24/04/2023, 07:06

230424-hw7rnsca7t 10

24/04/2023, 06:59

230424-hsa9asca5t 10

General

  • Target

    http://147.182.180.78:8081

  • Sample

    230424-hw7rnsca7t

Score
10/10

Malware Config

Targets

    • Target

      http://147.182.180.78:8081

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks