Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a7dc82e858de7abdb96d00f9744c6af5c91728d4b90d669adb2e7cac7f1652ef

  • Size

    308KB

  • Sample

    230718-fvtgjshb7t

  • MD5

    9f5ef1bd2935d0a4e8f158f64c30558a

  • SHA1

    87a0d9f998380e9ede0a7a70e652d2fffc89d913

  • SHA256

    a7dc82e858de7abdb96d00f9744c6af5c91728d4b90d669adb2e7cac7f1652ef

  • SHA512

    abc50e2c32f2fff25692c3ce1dec9a669bc5c098a14f6e8498749c9abef24ba7ba62bb6bcae7a90a17a7c7eb91b9cbd3a3d0f30316abf4bffa47f6af5348b973

  • SSDEEP

    3072:5JGXcVezz7EjiRKpwelYpKLUrlfKsLX049hWa/dUBilHMOnwXQPq8Gxzn729897X:mWhjiRiwzcErsBilHn27RV

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      a7dc82e858de7abdb96d00f9744c6af5c91728d4b90d669adb2e7cac7f1652ef

    • Size

      308KB

    • MD5

      9f5ef1bd2935d0a4e8f158f64c30558a

    • SHA1

      87a0d9f998380e9ede0a7a70e652d2fffc89d913

    • SHA256

      a7dc82e858de7abdb96d00f9744c6af5c91728d4b90d669adb2e7cac7f1652ef

    • SHA512

      abc50e2c32f2fff25692c3ce1dec9a669bc5c098a14f6e8498749c9abef24ba7ba62bb6bcae7a90a17a7c7eb91b9cbd3a3d0f30316abf4bffa47f6af5348b973

    • SSDEEP

      3072:5JGXcVezz7EjiRKpwelYpKLUrlfKsLX049hWa/dUBilHMOnwXQPq8Gxzn729897X:mWhjiRiwzcErsBilHn27RV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks