Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4ef7bd378eb2319bc1affd09adf9502144af966fbf990ffb3ffb5d23435fa167

  • Size

    1.0MB

  • Sample

    230920-zwmj6scf88

  • MD5

    795eaf49a8671ef20457dc22598ac7c1

  • SHA1

    c47e30ade26d59f2111697727bd63f1832e467f7

  • SHA256

    4ef7bd378eb2319bc1affd09adf9502144af966fbf990ffb3ffb5d23435fa167

  • SHA512

    98e66666403d31353d8e5b1761c895ce5a8e2f49804ee9b4ceb427b4bd08f9f9413f2b0b023cfd154afa38f7c9dc98cf3c14a8802909d53dd074b685b99b61d6

  • SSDEEP

    12288:JoeBdPenEp953bXeu5WWfo8oBNFJQxhTTgyKuLpv+aKq0G5:9jPenEp953bJfo8UneTsygPW

Malware Config

Extracted

Family

redline

Botnet

trush

C2

77.91.124.82:19071

Attributes
  • auth_value

    c13814867cde8193679cd0cad2d774be

Targets

    • Target

      4ef7bd378eb2319bc1affd09adf9502144af966fbf990ffb3ffb5d23435fa167

    • Size

      1.0MB

    • MD5

      795eaf49a8671ef20457dc22598ac7c1

    • SHA1

      c47e30ade26d59f2111697727bd63f1832e467f7

    • SHA256

      4ef7bd378eb2319bc1affd09adf9502144af966fbf990ffb3ffb5d23435fa167

    • SHA512

      98e66666403d31353d8e5b1761c895ce5a8e2f49804ee9b4ceb427b4bd08f9f9413f2b0b023cfd154afa38f7c9dc98cf3c14a8802909d53dd074b685b99b61d6

    • SSDEEP

      12288:JoeBdPenEp953bXeu5WWfo8oBNFJQxhTTgyKuLpv+aKq0G5:9jPenEp953bJfo8UneTsygPW

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks