Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x000800000001231f-107.dat

  • Size

    172KB

  • Sample

    230614-j2nreseh9y

  • MD5

    3f8bb47e4e3b0ee67699d04b409fb52c

  • SHA1

    3f5d4b92b9ba7bcc721b457205cfc5ffa37d74a6

  • SHA256

    b9eab12e5fd7694c8751bad39c6e7d79e7312c68aa6a8561084f72233f59afd7

  • SHA512

    7c08c39eeebc4f867b4ca1d89636f964d5ae33e25c80b4f24dae1e878878decaae4972674cf87200e0ea2984c19eff5d86a6b76a6c7292d22a2ff8b46d133364

  • SSDEEP

    1536:h5XZucNjBql36sv0W7T6Z9bHOrHbRxLvE9mBmjM1xNH1YQLzbusqxoqjOF0GkRqt:7XJWbuzo7L84mM1xN+iQOqjOFp8e8hK

Malware Config

Extracted

Family

redline

Botnet

dare

C2

83.97.73.129:19068

Attributes
  • auth_value

    cdee8b76b5a70827d5d5e110218c7d2f

Targets

    • Target

      0x000800000001231f-107.dat

    • Size

      172KB

    • MD5

      3f8bb47e4e3b0ee67699d04b409fb52c

    • SHA1

      3f5d4b92b9ba7bcc721b457205cfc5ffa37d74a6

    • SHA256

      b9eab12e5fd7694c8751bad39c6e7d79e7312c68aa6a8561084f72233f59afd7

    • SHA512

      7c08c39eeebc4f867b4ca1d89636f964d5ae33e25c80b4f24dae1e878878decaae4972674cf87200e0ea2984c19eff5d86a6b76a6c7292d22a2ff8b46d133364

    • SSDEEP

      1536:h5XZucNjBql36sv0W7T6Z9bHOrHbRxLvE9mBmjM1xNH1YQLzbusqxoqjOF0GkRqt:7XJWbuzo7L84mM1xN+iQOqjOFp8e8hK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks