Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2a5cf64dbcb336f9dd77d153f67e72c58c08ffe50190b1e2c9f370c3741380b1

  • Size

    714KB

  • Sample

    230818-xk32nsed71

  • MD5

    e77fb7cd586e00041500a195d80853a1

  • SHA1

    e645be832033e59892afd4117b191badacf46bb2

  • SHA256

    2a5cf64dbcb336f9dd77d153f67e72c58c08ffe50190b1e2c9f370c3741380b1

  • SHA512

    f074995e8ee38fd56beb23355c3cbaee89c1e6305ac91fa8dead6599e53bd74993fc8aabd8effd94b8807bc79cc0645fc2cdb38b35f78e06052c39552a055794

  • SSDEEP

    12288:rMrRy902Vko5h3Fom6tALSa3YGsiQR4mvNOFdrgKWDKD+:CyfP5Ram6tAdYGslR4mvoFdsKWDKD+

Malware Config

Extracted

Family

redline

Botnet

dugin

C2

77.91.124.73:19071

Attributes
  • auth_value

    7c3e46e091100fd26a6076996d374c28

Targets

    • Target

      2a5cf64dbcb336f9dd77d153f67e72c58c08ffe50190b1e2c9f370c3741380b1

    • Size

      714KB

    • MD5

      e77fb7cd586e00041500a195d80853a1

    • SHA1

      e645be832033e59892afd4117b191badacf46bb2

    • SHA256

      2a5cf64dbcb336f9dd77d153f67e72c58c08ffe50190b1e2c9f370c3741380b1

    • SHA512

      f074995e8ee38fd56beb23355c3cbaee89c1e6305ac91fa8dead6599e53bd74993fc8aabd8effd94b8807bc79cc0645fc2cdb38b35f78e06052c39552a055794

    • SSDEEP

      12288:rMrRy902Vko5h3Fom6tALSa3YGsiQR4mvNOFdrgKWDKD+:CyfP5Ram6tAdYGslR4mvoFdsKWDKD+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks