Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cf15e03819f999cb739fd15b63fcb37300219ee34266913cc01037d772dd7715

  • Size

    282KB

  • Sample

    230608-fpjp6ach31

  • MD5

    988c37fe4121e769689aac4bce9daa7f

  • SHA1

    16601c9643864162bb526cfcb07a89301add7d08

  • SHA256

    cf15e03819f999cb739fd15b63fcb37300219ee34266913cc01037d772dd7715

  • SHA512

    39627841e10bf6f978448ca5fbeab96a8ab7229a4b0b2568e944c9266f4621f90c0e818fba5eea864742eef5f9f9bcae7f3df3e16a58601c1d512053a54f033b

  • SSDEEP

    6144:eQvoWvJakXxwvTygXUNVS4MGh1aBFrvz1xcxcWhUrt:eUTuyR1aBFrvz1xcxdUrt

Malware Config

Extracted

Family

redline

Botnet

sheron

C2

83.97.73.129:19068

Attributes
  • auth_value

    2d067e7e2372227d3a03b335260112e9

Targets

    • Target

      cf15e03819f999cb739fd15b63fcb37300219ee34266913cc01037d772dd7715

    • Size

      282KB

    • MD5

      988c37fe4121e769689aac4bce9daa7f

    • SHA1

      16601c9643864162bb526cfcb07a89301add7d08

    • SHA256

      cf15e03819f999cb739fd15b63fcb37300219ee34266913cc01037d772dd7715

    • SHA512

      39627841e10bf6f978448ca5fbeab96a8ab7229a4b0b2568e944c9266f4621f90c0e818fba5eea864742eef5f9f9bcae7f3df3e16a58601c1d512053a54f033b

    • SSDEEP

      6144:eQvoWvJakXxwvTygXUNVS4MGh1aBFrvz1xcxcWhUrt:eUTuyR1aBFrvz1xcxdUrt

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks