Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x0008000000012310-116.dat

  • Size

    145KB

  • Sample

    230522-wht6babg76

  • MD5

    fbe9063e4145d41d8035087a142e4bb2

  • SHA1

    cb19dd0be60e9ce5eedcdb5d667a378542d11625

  • SHA256

    8259db848ee6718ddb6b0964b8395f224312802e2ab478d5b1a6a4fd18e80260

  • SHA512

    64ab75ccd27f4d59b50696e911e54104db09b840a075ec56011d061758116003c88a2c87783b1e91e487bd7608b2ea0eaffe38fda7291c214138120877a6e302

  • SSDEEP

    1536:IWBGlTP+mZP61iEYDmRSxPg4sZ1kQiQo2/yu4PDhoZQiObup3KjDOt0wuei/iv+x:6V+m5cNQmRSxR10OzbnOthzZB8e8ht

Malware Config

Extracted

Family

redline

Botnet

meren

C2

77.91.68.253:19065

Attributes
  • auth_value

    a26557b435e44b55fdd4708fbba97d21

Targets

    • Target

      0x0008000000012310-116.dat

    • Size

      145KB

    • MD5

      fbe9063e4145d41d8035087a142e4bb2

    • SHA1

      cb19dd0be60e9ce5eedcdb5d667a378542d11625

    • SHA256

      8259db848ee6718ddb6b0964b8395f224312802e2ab478d5b1a6a4fd18e80260

    • SHA512

      64ab75ccd27f4d59b50696e911e54104db09b840a075ec56011d061758116003c88a2c87783b1e91e487bd7608b2ea0eaffe38fda7291c214138120877a6e302

    • SSDEEP

      1536:IWBGlTP+mZP61iEYDmRSxPg4sZ1kQiQo2/yu4PDhoZQiObup3KjDOt0wuei/iv+x:6V+m5cNQmRSxR10OzbnOthzZB8e8ht

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks