Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x00080000000139f0-78.dat

  • Size

    145KB

  • Sample

    230521-ancmkafc66

  • MD5

    345101f58401f179360557cac360912b

  • SHA1

    7e8bcd201e23ebecc542381707f1ad067ac46659

  • SHA256

    c993bece990f79a576f5b303faf61ab4274fef947f4979a7aa28b0f9d1fb3584

  • SHA512

    e900a4138bda49b988992eb2c61ab51b3785465b4b7cdc6b00fc283716e63b308f6fe3707f054e102eb7811b2a61c5f0ccdbd04e6f59b38a0be33ee90cac4fb2

  • SSDEEP

    3072:2V+m5cNQmRSxWWAcP+DDXedh7Z58e8hk:2jwCUudh7z

Malware Config

Extracted

Family

redline

Botnet

duper

C2

77.91.68.253:19065

Attributes
  • auth_value

    57e17ebbdb18f4882b95fe05402ef1c8

Targets

    • Target

      0x00080000000139f0-78.dat

    • Size

      145KB

    • MD5

      345101f58401f179360557cac360912b

    • SHA1

      7e8bcd201e23ebecc542381707f1ad067ac46659

    • SHA256

      c993bece990f79a576f5b303faf61ab4274fef947f4979a7aa28b0f9d1fb3584

    • SHA512

      e900a4138bda49b988992eb2c61ab51b3785465b4b7cdc6b00fc283716e63b308f6fe3707f054e102eb7811b2a61c5f0ccdbd04e6f59b38a0be33ee90cac4fb2

    • SSDEEP

      3072:2V+m5cNQmRSxWWAcP+DDXedh7Z58e8hk:2jwCUudh7z

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks