Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    l8412641.exe

  • Size

    145KB

  • Sample

    230513-3ndh3saa52

  • MD5

    6d029ca6ce5f44e188b0f6d0f5f98bb6

  • SHA1

    bdb651303a34389914c2756fbaa220eff01c7ebb

  • SHA256

    a504755e40c94c02829bc90ebd97cf20afb802f223a88fcea9b32bddee5d7c76

  • SHA512

    1e22e2c25056d76a1c47a6ea2e7a16448d01dcc0312362b73b3f09e16ddd9608ee1369302e7251049d81c8ae8cf1ec5b29f432c22c7d09c2ddc4a86a610ffc8e

  • SSDEEP

    3072:AV+m5cVQmRSxAX9GYM1vYWr9h/Z28e8hq:Aj4Zyz9h/M

Malware Config

Extracted

Family

redline

Botnet

dogma

C2

185.161.248.75:4132

Attributes
  • auth_value

    d6c5d36e9aa03c956dc76aa0fcbe3639

Targets

    • Target

      l8412641.exe

    • Size

      145KB

    • MD5

      6d029ca6ce5f44e188b0f6d0f5f98bb6

    • SHA1

      bdb651303a34389914c2756fbaa220eff01c7ebb

    • SHA256

      a504755e40c94c02829bc90ebd97cf20afb802f223a88fcea9b32bddee5d7c76

    • SHA512

      1e22e2c25056d76a1c47a6ea2e7a16448d01dcc0312362b73b3f09e16ddd9608ee1369302e7251049d81c8ae8cf1ec5b29f432c22c7d09c2ddc4a86a610ffc8e

    • SSDEEP

      3072:AV+m5cVQmRSxAX9GYM1vYWr9h/Z28e8hq:Aj4Zyz9h/M

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks