Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d8b749cb322160fe7493300668983494.exe

  • Size

    370KB

  • Sample

    230720-jgdqqaea71

  • MD5

    d8b749cb322160fe7493300668983494

  • SHA1

    6e2c7f760f0a8c8809f51d77fecfd9e6b8adecde

  • SHA256

    78a80da889fb77e1536903aa1d2abef676b1663c0cdff25dc03f16254ea2168e

  • SHA512

    973343565997b0fe56484bfb0463097750b94b71f173d238c7d778aa153a2784547802d24f4f196cf2fb53481410116a48ab340a589ae50b9573c0a74dc47b81

  • SSDEEP

    6144:iTQMLxiCEeIu1w2KvbOgc/PXm7iNJQqU2O4A8/N60S:iMMtn1wJbOgEuUQqU2O4z/U0S

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

178.32.90.250:29608

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Targets

    • Target

      d8b749cb322160fe7493300668983494.exe

    • Size

      370KB

    • MD5

      d8b749cb322160fe7493300668983494

    • SHA1

      6e2c7f760f0a8c8809f51d77fecfd9e6b8adecde

    • SHA256

      78a80da889fb77e1536903aa1d2abef676b1663c0cdff25dc03f16254ea2168e

    • SHA512

      973343565997b0fe56484bfb0463097750b94b71f173d238c7d778aa153a2784547802d24f4f196cf2fb53481410116a48ab340a589ae50b9573c0a74dc47b81

    • SSDEEP

      6144:iTQMLxiCEeIu1w2KvbOgc/PXm7iNJQqU2O4A8/N60S:iMMtn1wJbOgEuUQqU2O4z/U0S

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks