Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x0008000000012302-116.dat

  • Size

    145KB

  • Sample

    230527-mnkpdsbh9w

  • MD5

    e15c6655580ea21042950cd3fcd18c14

  • SHA1

    07bffa06410b1c57a83966109cb71d9b7b704923

  • SHA256

    3edf4525825291a3bcbb02c7c95e42c18067237a049881c698dcee9db422e144

  • SHA512

    7aef853b35fff318406761f60a7db389756cd5d4e12b4c621ab2d948393d536ce3226714bf18334a1afbb16ace43ebceb2d1173bd8aba4c6c06b876e85ea4027

  • SSDEEP

    3072:1V+m5c/QmRSNzqzJjJnwwzvhwZK8e8hE:1j2Y8Dvhww

Malware Config

Extracted

Family

redline

Botnet

luxa

C2

77.91.68.157:19065

Attributes
  • auth_value

    2dda654f9abf47e50c7446be3ecc1806

Targets

    • Target

      0x0008000000012302-116.dat

    • Size

      145KB

    • MD5

      e15c6655580ea21042950cd3fcd18c14

    • SHA1

      07bffa06410b1c57a83966109cb71d9b7b704923

    • SHA256

      3edf4525825291a3bcbb02c7c95e42c18067237a049881c698dcee9db422e144

    • SHA512

      7aef853b35fff318406761f60a7db389756cd5d4e12b4c621ab2d948393d536ce3226714bf18334a1afbb16ace43ebceb2d1173bd8aba4c6c06b876e85ea4027

    • SSDEEP

      3072:1V+m5c/QmRSNzqzJjJnwwzvhwZK8e8hE:1j2Y8Dvhww

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.