Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    386d04e2357e842b9d0aa3b6eccf1c0d.bin

  • Size

    230KB

  • Sample

    231007-bqx7qagf8x

  • MD5

    386d04e2357e842b9d0aa3b6eccf1c0d

  • SHA1

    12bb8b158272221406177960d3b5c7db091e65bb

  • SHA256

    a92d673d8e00b68c0fbbe2036b9a58510fd1353914c914f429b4213bb462b7c7

  • SHA512

    5266a59bb03b4f16b9ce9cbfd0baa033a79b9b71b46c8d613062a9ef80ba049c25dfe5d8938e4e48aa96fad8ff9bef2aba4c103999f52f0878b6aec74fbc73e9

  • SSDEEP

    3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

Malware Config

Extracted

Family

redline

Botnet

gigant

C2

77.91.124.55:19071

Targets

    • Target

      386d04e2357e842b9d0aa3b6eccf1c0d.bin

    • Size

      230KB

    • MD5

      386d04e2357e842b9d0aa3b6eccf1c0d

    • SHA1

      12bb8b158272221406177960d3b5c7db091e65bb

    • SHA256

      a92d673d8e00b68c0fbbe2036b9a58510fd1353914c914f429b4213bb462b7c7

    • SHA512

      5266a59bb03b4f16b9ce9cbfd0baa033a79b9b71b46c8d613062a9ef80ba049c25dfe5d8938e4e48aa96fad8ff9bef2aba4c103999f52f0878b6aec74fbc73e9

    • SSDEEP

      3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks