Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x0007000000015c84-76.dat

  • Size

    172KB

  • Sample

    230719-wq6t3sae33

  • MD5

    03edff473baab8f675cbbbbc06801de4

  • SHA1

    f496f024aeeb320881944c9d568c5db7ddf9f198

  • SHA256

    f41d5e0530fa4487c3c6691984628f7458502321be94eb4b0cd7bea00be7ec09

  • SHA512

    daf5d942a6972441d5c81627de264bb218b8f60a915162889deab56f98b8b01f2d5378c606ec38b6a6a7ec433407e7fa29a1d5c6025e2ce20915d35d9951fab8

  • SSDEEP

    3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

Malware Config

Extracted

Family

redline

Botnet

nasa

C2

77.91.68.68:19071

Attributes
  • auth_value

    6da71218d8a9738ea3a9a78b5677589b

Targets

    • Target

      0x0007000000015c84-76.dat

    • Size

      172KB

    • MD5

      03edff473baab8f675cbbbbc06801de4

    • SHA1

      f496f024aeeb320881944c9d568c5db7ddf9f198

    • SHA256

      f41d5e0530fa4487c3c6691984628f7458502321be94eb4b0cd7bea00be7ec09

    • SHA512

      daf5d942a6972441d5c81627de264bb218b8f60a915162889deab56f98b8b01f2d5378c606ec38b6a6a7ec433407e7fa29a1d5c6025e2ce20915d35d9951fab8

    • SSDEEP

      3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks