Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    507180e75c6daae7d802c4c4128d4c62ebf334a6c733db4d078fe53b81513f53

  • Size

    497KB

  • Sample

    231023-thz1fsbf85

  • MD5

    97b28e31c893f9b362f3c06debba492a

  • SHA1

    29b63e112ba4f18418248af5513a728262097487

  • SHA256

    507180e75c6daae7d802c4c4128d4c62ebf334a6c733db4d078fe53b81513f53

  • SHA512

    e4f8ead5badeb76a528b57f4cf30a1800f8a7c9b1ca6cbb6bd7a26f551749b087544b5c3c6049d5d952a1b1f85834293e49da309bd91e2e504aa8d148730d812

  • SSDEEP

    6144:JyIsQ6QfD2brEeyt8zpUOAia60W2CBFAR2S64AxQcXJ6b25yeQB8AC6ANh:fsQn2bzjzpUOAia60WJS2R+cx5mBEDL

Malware Config

Targets

    • Target

      507180e75c6daae7d802c4c4128d4c62ebf334a6c733db4d078fe53b81513f53

    • Size

      497KB

    • MD5

      97b28e31c893f9b362f3c06debba492a

    • SHA1

      29b63e112ba4f18418248af5513a728262097487

    • SHA256

      507180e75c6daae7d802c4c4128d4c62ebf334a6c733db4d078fe53b81513f53

    • SHA512

      e4f8ead5badeb76a528b57f4cf30a1800f8a7c9b1ca6cbb6bd7a26f551749b087544b5c3c6049d5d952a1b1f85834293e49da309bd91e2e504aa8d148730d812

    • SSDEEP

      6144:JyIsQ6QfD2brEeyt8zpUOAia60W2CBFAR2S64AxQcXJ6b25yeQB8AC6ANh:fsQn2bzjzpUOAia60WJS2R+cx5mBEDL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks