Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x000900000001230f-78.dat

  • Size

    145KB

  • Sample

    230525-2579cacg92

  • MD5

    1bdc29133f9050e02878965e6dd958b4

  • SHA1

    e074fe8f6033c1def84d89445a9e1bf064a9c0ac

  • SHA256

    5d95025881b50d354fd86f40b5157db2c435c56871fba60fa3915df32fbf6324

  • SHA512

    f585d6c030927baac8b477b4e1d984184c706b12f2243f68b64c2b9c90e25cfba386ad38279f998f5f692a850b9db63f0521c2e4f35a5b5be92d50f18bffe960

  • SSDEEP

    3072:TV+m5clQmRSRNrncqvQ8nVBNDBhwZq8e8hJ:Tjor211BhwA

Malware Config

Extracted

Family

redline

Botnet

dina

C2

83.97.73.122:19062

Attributes
  • auth_value

    4f77073adc624269de1bff760b9bc471

Targets

    • Target

      0x000900000001230f-78.dat

    • Size

      145KB

    • MD5

      1bdc29133f9050e02878965e6dd958b4

    • SHA1

      e074fe8f6033c1def84d89445a9e1bf064a9c0ac

    • SHA256

      5d95025881b50d354fd86f40b5157db2c435c56871fba60fa3915df32fbf6324

    • SHA512

      f585d6c030927baac8b477b4e1d984184c706b12f2243f68b64c2b9c90e25cfba386ad38279f998f5f692a850b9db63f0521c2e4f35a5b5be92d50f18bffe960

    • SSDEEP

      3072:TV+m5clQmRSRNrncqvQ8nVBNDBhwZq8e8hJ:Tjor211BhwA

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks