Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x0006000000018685-74.dat

  • Size

    175KB

  • Sample

    231014-bspclahe5y

  • MD5

    1aeb92aefb323576a0db2de7de12dcb6

  • SHA1

    f6e378ac7146fdb4cd093fc54dd7ecc02bb4e4be

  • SHA256

    4cec427b41b4a136e87cb8d35937cd9389417eecf200d205554807b84954aee2

  • SHA512

    1948427b59691f921d9a1cc92d161537476138477e054129a19d1359a3253f34a2e9ce440367f17fd86b7d91d6c90ed32f32109f6167150acba16ceec9b30737

  • SSDEEP

    3072:0P7NPifVI0pMLGKOmT0xLbE2FE0CBFOshR0cJj8e8hv:e7sVI0pMLG/bxFE0GhR0cV

Malware Config

Extracted

Family

redline

Botnet

mrak

C2

77.91.124.82:19071

Attributes
  • auth_value

    7d9a335ab5dfd42d374867c96fe25302

Targets

    • Target

      0x0006000000018685-74.dat

    • Size

      175KB

    • MD5

      1aeb92aefb323576a0db2de7de12dcb6

    • SHA1

      f6e378ac7146fdb4cd093fc54dd7ecc02bb4e4be

    • SHA256

      4cec427b41b4a136e87cb8d35937cd9389417eecf200d205554807b84954aee2

    • SHA512

      1948427b59691f921d9a1cc92d161537476138477e054129a19d1359a3253f34a2e9ce440367f17fd86b7d91d6c90ed32f32109f6167150acba16ceec9b30737

    • SSDEEP

      3072:0P7NPifVI0pMLGKOmT0xLbE2FE0CBFOshR0cJj8e8hv:e7sVI0pMLG/bxFE0GhR0cV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks