Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5de35859694f372a874daeabab283fd0ce60955a210187323dd9bc83dde4fb64

  • Size

    309KB

  • Sample

    230608-mmqh9aec73

  • MD5

    63315c91cfad4baca419a337767bc9b5

  • SHA1

    1bb12367b8b11a7bd54d8b7310b1f67d5a671ec0

  • SHA256

    5de35859694f372a874daeabab283fd0ce60955a210187323dd9bc83dde4fb64

  • SHA512

    17423cfd5f2cf4e6f7a9d52b5508744fab6c2d7d9fd8309c213bb8e42f77387ef69b8e0df1ae1338ef24294ccfe0d9cb220d9999d3e4eaa56e84c42e1d29d9cc

  • SSDEEP

    6144:wD5k3As3xGy6FMqAewvTygXUNVS4MGh1aBFrvz1xcxc7N0:wD20yTqA1yR1aBFrvz1xcxo0

Malware Config

Extracted

Family

redline

Botnet

sheron

C2

83.97.73.129:19068

Attributes
  • auth_value

    2d067e7e2372227d3a03b335260112e9

Targets

    • Target

      5de35859694f372a874daeabab283fd0ce60955a210187323dd9bc83dde4fb64

    • Size

      309KB

    • MD5

      63315c91cfad4baca419a337767bc9b5

    • SHA1

      1bb12367b8b11a7bd54d8b7310b1f67d5a671ec0

    • SHA256

      5de35859694f372a874daeabab283fd0ce60955a210187323dd9bc83dde4fb64

    • SHA512

      17423cfd5f2cf4e6f7a9d52b5508744fab6c2d7d9fd8309c213bb8e42f77387ef69b8e0df1ae1338ef24294ccfe0d9cb220d9999d3e4eaa56e84c42e1d29d9cc

    • SSDEEP

      6144:wD5k3As3xGy6FMqAewvTygXUNVS4MGh1aBFrvz1xcxc7N0:wD20yTqA1yR1aBFrvz1xcxo0

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks