Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    87e50f698c9c9cbcf289afd870e10842281a8568406fad169a7b49ca3c187fd8

  • Size

    729KB

  • Sample

    230714-jfjwcacf65

  • MD5

    c07c6ddaa04cb01f8a70bc6626174ba2

  • SHA1

    458f0989e5ad83dc7f901e6b321de53915b1ca2a

  • SHA256

    87e50f698c9c9cbcf289afd870e10842281a8568406fad169a7b49ca3c187fd8

  • SHA512

    37012966c2f04e804982995e82d925dea0701b650365dbb08093c6cbc898cd61899f2ac77bae2622c22cc723e588524dd3a3b027f82f28fe9dc6456b9ec2a6c2

  • SSDEEP

    12288:FFQfvHdPD8kh1IQK/RxowECWvPNoGAwdfGZ+5iICSVtg0wBW3iFt4ONq30/4St2X:Fu9PD8khe//RxowECWvPNoGAwdfGZYBM

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      87e50f698c9c9cbcf289afd870e10842281a8568406fad169a7b49ca3c187fd8

    • Size

      729KB

    • MD5

      c07c6ddaa04cb01f8a70bc6626174ba2

    • SHA1

      458f0989e5ad83dc7f901e6b321de53915b1ca2a

    • SHA256

      87e50f698c9c9cbcf289afd870e10842281a8568406fad169a7b49ca3c187fd8

    • SHA512

      37012966c2f04e804982995e82d925dea0701b650365dbb08093c6cbc898cd61899f2ac77bae2622c22cc723e588524dd3a3b027f82f28fe9dc6456b9ec2a6c2

    • SSDEEP

      12288:FFQfvHdPD8kh1IQK/RxowECWvPNoGAwdfGZ+5iICSVtg0wBW3iFt4ONq30/4St2X:Fu9PD8khe//RxowECWvPNoGAwdfGZYBM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks