Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x0008000000012302-116.dat

  • Size

    145KB

  • Sample

    230527-mnkpdsbh9w

  • MD5

    e15c6655580ea21042950cd3fcd18c14

  • SHA1

    07bffa06410b1c57a83966109cb71d9b7b704923

  • SHA256

    3edf4525825291a3bcbb02c7c95e42c18067237a049881c698dcee9db422e144

  • SHA512

    7aef853b35fff318406761f60a7db389756cd5d4e12b4c621ab2d948393d536ce3226714bf18334a1afbb16ace43ebceb2d1173bd8aba4c6c06b876e85ea4027

  • SSDEEP

    3072:1V+m5c/QmRSNzqzJjJnwwzvhwZK8e8hE:1j2Y8Dvhww

Malware Config

Extracted

Family

redline

Botnet

luxa

C2

77.91.68.157:19065

Attributes
  • auth_value

    2dda654f9abf47e50c7446be3ecc1806

Targets

    • Target

      0x0008000000012302-116.dat

    • Size

      145KB

    • MD5

      e15c6655580ea21042950cd3fcd18c14

    • SHA1

      07bffa06410b1c57a83966109cb71d9b7b704923

    • SHA256

      3edf4525825291a3bcbb02c7c95e42c18067237a049881c698dcee9db422e144

    • SHA512

      7aef853b35fff318406761f60a7db389756cd5d4e12b4c621ab2d948393d536ce3226714bf18334a1afbb16ace43ebceb2d1173bd8aba4c6c06b876e85ea4027

    • SSDEEP

      3072:1V+m5c/QmRSNzqzJjJnwwzvhwZK8e8hE:1j2Y8Dvhww

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks