Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cf15e03819f999cb739fd15b63fcb37300219ee34266913cc01037d772dd7715

  • Size

    282KB

  • Sample

    230608-fpjp6ach31

  • MD5

    988c37fe4121e769689aac4bce9daa7f

  • SHA1

    16601c9643864162bb526cfcb07a89301add7d08

  • SHA256

    cf15e03819f999cb739fd15b63fcb37300219ee34266913cc01037d772dd7715

  • SHA512

    39627841e10bf6f978448ca5fbeab96a8ab7229a4b0b2568e944c9266f4621f90c0e818fba5eea864742eef5f9f9bcae7f3df3e16a58601c1d512053a54f033b

  • SSDEEP

    6144:eQvoWvJakXxwvTygXUNVS4MGh1aBFrvz1xcxcWhUrt:eUTuyR1aBFrvz1xcxdUrt

Malware Config

Extracted

Family

redline

Botnet

sheron

C2

83.97.73.129:19068

Attributes
  • auth_value

    2d067e7e2372227d3a03b335260112e9

Targets

    • Target

      cf15e03819f999cb739fd15b63fcb37300219ee34266913cc01037d772dd7715

    • Size

      282KB

    • MD5

      988c37fe4121e769689aac4bce9daa7f

    • SHA1

      16601c9643864162bb526cfcb07a89301add7d08

    • SHA256

      cf15e03819f999cb739fd15b63fcb37300219ee34266913cc01037d772dd7715

    • SHA512

      39627841e10bf6f978448ca5fbeab96a8ab7229a4b0b2568e944c9266f4621f90c0e818fba5eea864742eef5f9f9bcae7f3df3e16a58601c1d512053a54f033b

    • SSDEEP

      6144:eQvoWvJakXxwvTygXUNVS4MGh1aBFrvz1xcxcWhUrt:eUTuyR1aBFrvz1xcxdUrt

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.