Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x0006000000014834-116.dat

  • Size

    145KB

  • Sample

    230519-xe5y3saa9x

  • MD5

    e232dff75dc52d1efdb690cf6b7be225

  • SHA1

    efd8c007dcffa50083eeb9aa5f5925faad046a45

  • SHA256

    cbd9ce68a417f8c74f881973cd489e6457323d4aec696926afa3ae509baa08e0

  • SHA512

    8373cf12a4e3ce837c976330c2a7ebcfe65c742e4a5bbb54a78df7d49162e4a0ee54afd2c41196202232e495b1525091a13b491c94b471ec3366d7e8af27de9a

  • SSDEEP

    3072:PV+m5chQmRSZQ1avem1eJwfUuMyNiOhjZR8e8hX:PjENURTIOhj7

Malware Config

Extracted

Family

redline

Botnet

muser

C2

77.91.68.253:19065

Attributes
  • auth_value

    ab307a8e027ba1296455e3d548f168a3

Targets

    • Target

      0x0006000000014834-116.dat

    • Size

      145KB

    • MD5

      e232dff75dc52d1efdb690cf6b7be225

    • SHA1

      efd8c007dcffa50083eeb9aa5f5925faad046a45

    • SHA256

      cbd9ce68a417f8c74f881973cd489e6457323d4aec696926afa3ae509baa08e0

    • SHA512

      8373cf12a4e3ce837c976330c2a7ebcfe65c742e4a5bbb54a78df7d49162e4a0ee54afd2c41196202232e495b1525091a13b491c94b471ec3366d7e8af27de9a

    • SSDEEP

      3072:PV+m5chQmRSZQ1avem1eJwfUuMyNiOhjZR8e8hX:PjENURTIOhj7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks