Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    96dd07bd64cbe4630378e1fedf380db4acce8e0fad4a3f650126fda5e4b8fe2c

  • Size

    1.1MB

  • Sample

    230821-p8yg4aef51

  • MD5

    b9354b705b43d6df721ad99268a5481e

  • SHA1

    4e241c11bdd1d492c59c8c600bcfa99b01274ad6

  • SHA256

    96dd07bd64cbe4630378e1fedf380db4acce8e0fad4a3f650126fda5e4b8fe2c

  • SHA512

    c273bf450ef1e8ebf17e8ed9fcda0726410fe4f74ec2e21fd594399f8c319a978a1f5af783114b72627ede6535877dbdcb1a5086251fcc9936a320ed639c37c8

  • SSDEEP

    12288:wk7VqU/1/jovUc7PvqoPXaS3Kt/VCzpG5XM+mJI/3eD5+1uYdHp3jX6d9GNnwpzF:wkd1/jg7PvqovaJlM+EIPeEXUCwpz

Malware Config

Extracted

Family

redline

Botnet

TEST

C2

46.149.77.25:8599

Attributes
  • auth_value

    8bc44a2d180183251d176d7b20ad1f91

Targets

    • Target

      96dd07bd64cbe4630378e1fedf380db4acce8e0fad4a3f650126fda5e4b8fe2c

    • Size

      1.1MB

    • MD5

      b9354b705b43d6df721ad99268a5481e

    • SHA1

      4e241c11bdd1d492c59c8c600bcfa99b01274ad6

    • SHA256

      96dd07bd64cbe4630378e1fedf380db4acce8e0fad4a3f650126fda5e4b8fe2c

    • SHA512

      c273bf450ef1e8ebf17e8ed9fcda0726410fe4f74ec2e21fd594399f8c319a978a1f5af783114b72627ede6535877dbdcb1a5086251fcc9936a320ed639c37c8

    • SSDEEP

      12288:wk7VqU/1/jovUc7PvqoPXaS3Kt/VCzpG5XM+mJI/3eD5+1uYdHp3jX6d9GNnwpzF:wkd1/jg7PvqovaJlM+EIPeEXUCwpz

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks