Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x0006000000023212-171.dat

  • Size

    177KB

  • Sample

    230804-hyavqahh92

  • MD5

    9fe083a9fedb0449cf01800a065aee68

  • SHA1

    28dd508988a39706617d876c02ef81bd3fb60a39

  • SHA256

    08424ad08f9f75f7828698c19ee4836b478eaaeec0a12f9fee4d0958de57f45c

  • SHA512

    9ce1dd151c85cf712a6fd738deea35bc222c7efca9ad29678307aed87dcbe4f2a1b44d0ceeb2b51e9d2bb1da23a44d9b6b362ea1e04a6f77ad0ff8250ad2d425

  • SSDEEP

    3072:b5fB8CH2R16klxNtmud8q6msW+/8e8hrXO:bF5kbjV6msW+/

Malware Config

Extracted

Family

redline

Botnet

maxik

C2

77.91.124.156:19071

Attributes
  • auth_value

    a7714e1bc167c67e3fc8f9e368352269

Targets

    • Target

      0x0006000000023212-171.dat

    • Size

      177KB

    • MD5

      9fe083a9fedb0449cf01800a065aee68

    • SHA1

      28dd508988a39706617d876c02ef81bd3fb60a39

    • SHA256

      08424ad08f9f75f7828698c19ee4836b478eaaeec0a12f9fee4d0958de57f45c

    • SHA512

      9ce1dd151c85cf712a6fd738deea35bc222c7efca9ad29678307aed87dcbe4f2a1b44d0ceeb2b51e9d2bb1da23a44d9b6b362ea1e04a6f77ad0ff8250ad2d425

    • SSDEEP

      3072:b5fB8CH2R16klxNtmud8q6msW+/8e8hrXO:bF5kbjV6msW+/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks