Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3888-2460-0x0000000000140000-0x000000000017C000-memory.dmp

  • Size

    240KB

  • MD5

    eb34c72496a649c12ecfeae61244611f

  • SHA1

    4b757eaf822fe138822d23b06e344bbc5be0f6f4

  • SHA256

    265e0c51dc90c6f6d911a324a26cb4a2da10b6c4f9c89df8ca3725ef3ba9ac6f

  • SHA512

    3320353e9fab3c8d12bad3493c7d5d2273c6292765585f0573dd89040d90a98be844cb2c368e57f3f265e47537a644149e28d12626fb1cf947a9b6f9c9ee5302

  • SSDEEP

    6144:tC4gdz070NgcoTrFzO2DzzzzzzHLzzzzzzzrzzzzzzzzzzzzzDzzzzzzL7z30yfE:pO5NgcoTrp9LrorsI

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

LiveTraffic

C2

77.105.132.87:6731

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3888-2460-0x0000000000140000-0x000000000017C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections