Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f607780c6bce5a1a4b747d364664855fc9a6666761e2acfedf790c03e459b16f

  • Size

    262KB

  • Sample

    230607-qdzbksbc9s

  • MD5

    bd83de9c2d8940587ab27462a40940ab

  • SHA1

    4051babc34cfa64abba4af3c04ad8a0caec91458

  • SHA256

    f607780c6bce5a1a4b747d364664855fc9a6666761e2acfedf790c03e459b16f

  • SHA512

    1072248404056615f97235148f81dc11a6aecb0b8da5f0337b36ee5ded2f3cea20b83a7e475fe5e0f8106a71c552574826cf3971f1cf716f0fa4c45f9d7650f8

  • SSDEEP

    3072:Ox/qx1OuyRyXFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2SUHcj/:a/qx1aEFaQ7W05AEezbMPZFzAy2Sc

Malware Config

Extracted

Family

redline

Botnet

sheron

C2

83.97.73.129:19068

Attributes
  • auth_value

    2d067e7e2372227d3a03b335260112e9

Targets

    • Target

      f607780c6bce5a1a4b747d364664855fc9a6666761e2acfedf790c03e459b16f

    • Size

      262KB

    • MD5

      bd83de9c2d8940587ab27462a40940ab

    • SHA1

      4051babc34cfa64abba4af3c04ad8a0caec91458

    • SHA256

      f607780c6bce5a1a4b747d364664855fc9a6666761e2acfedf790c03e459b16f

    • SHA512

      1072248404056615f97235148f81dc11a6aecb0b8da5f0337b36ee5ded2f3cea20b83a7e475fe5e0f8106a71c552574826cf3971f1cf716f0fa4c45f9d7650f8

    • SSDEEP

      3072:Ox/qx1OuyRyXFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2SUHcj/:a/qx1aEFaQ7W05AEezbMPZFzAy2Sc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks