Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    920550x00000000000F00000x.dmp

  • Size

    4.5MB

  • Sample

    230630-r6mzpade56

  • MD5

    e6d6ddc8de48707baaa6770b34f65d3c

  • SHA1

    7f0450fa767ffa70f5c2efb55ffe226118da777b

  • SHA256

    34a0d01a7529c165f687651f12c4853155a5f0843b2af38f255ababedce72d7f

  • SHA512

    7af08ec646e00785beb3ca2636c38b71ca654d84c5743f19abf86d2431517717286b6060063af3b8ca298ade8a357082680f344cfaa1e08ca0ee945530d5cbea

  • SSDEEP

    49152:Y9KrUj8deYIP0UDHpYfeZjFbED5VExTUjBl+Tzl6n0AG7ZZSyoWei+sJ0UBMeX:YorUj8wYIP0UDJYfevpxABqH2lGX

Malware Config

Extracted

Family

redline

Botnet

Z

C2

n57b30a.info:81

Attributes
  • auth_value

    907a217c291f74c1a111fc9371fe2803

Targets

    • Target

      920550x00000000000F00000x.dmp

    • Size

      4.5MB

    • MD5

      e6d6ddc8de48707baaa6770b34f65d3c

    • SHA1

      7f0450fa767ffa70f5c2efb55ffe226118da777b

    • SHA256

      34a0d01a7529c165f687651f12c4853155a5f0843b2af38f255ababedce72d7f

    • SHA512

      7af08ec646e00785beb3ca2636c38b71ca654d84c5743f19abf86d2431517717286b6060063af3b8ca298ade8a357082680f344cfaa1e08ca0ee945530d5cbea

    • SSDEEP

      49152:Y9KrUj8deYIP0UDHpYfeZjFbED5VExTUjBl+Tzl6n0AG7ZZSyoWei+sJ0UBMeX:YorUj8wYIP0UDJYfevpxABqH2lGX

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks