Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    82ce3e2075a04b41fe2ba4551ae1e919e04986b64e470dccea4c5d6763722f0c_JC.exe

  • Size

    1.5MB

  • Sample

    231011-2ha1bsgh3w

  • MD5

    122c56428f8fca1a96e7c967d9de3c15

  • SHA1

    a87b6d1faf1e07ddb7d5abe288683fcd6d34db15

  • SHA256

    82ce3e2075a04b41fe2ba4551ae1e919e04986b64e470dccea4c5d6763722f0c

  • SHA512

    cc8bf0bab8393b8870f7da8c2e71e0a5310f3397497bef6b844774076bb11794f6b68e52560b1e4621f3b35a411808f70a77bed036c091d2ed8b0d8d5bc4e9e1

  • SSDEEP

    24576:FJlEuWQogLXcPR7L+HnC8rzsXUTYsAUr/ovuxtpqQEP+q3:FHogLXcPRuhUkTYs1EvgpqP

Score
10/10

Malware Config

Targets

    • Target

      82ce3e2075a04b41fe2ba4551ae1e919e04986b64e470dccea4c5d6763722f0c_JC.exe

    • Size

      1.5MB

    • MD5

      122c56428f8fca1a96e7c967d9de3c15

    • SHA1

      a87b6d1faf1e07ddb7d5abe288683fcd6d34db15

    • SHA256

      82ce3e2075a04b41fe2ba4551ae1e919e04986b64e470dccea4c5d6763722f0c

    • SHA512

      cc8bf0bab8393b8870f7da8c2e71e0a5310f3397497bef6b844774076bb11794f6b68e52560b1e4621f3b35a411808f70a77bed036c091d2ed8b0d8d5bc4e9e1

    • SSDEEP

      24576:FJlEuWQogLXcPR7L+HnC8rzsXUTYsAUr/ovuxtpqQEP+q3:FHogLXcPRuhUkTYs1EvgpqP

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks