Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

19d20f6312...1a.exe

windows7-x64

10

19d20f6312...1a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    19d20f6312b8ddd3127b5f51b13b891a

  • Size

    99KB

  • Sample

    231225-nakynsceh7

  • MD5

    19d20f6312b8ddd3127b5f51b13b891a

  • SHA1

    b82749db450bd0969c37bf89ebf24a82c99da5be

  • SHA256

    92a1179374c0b225592803d7c31def09ea09e99b85fbe0447641a0b29b1e5c3f

  • SHA512

    1060d19f010239ea9446aae4556ec95914c1058f738419f3b1fead813cb967e420a873b688eb9261c11b4fe7f4820ef04ca896145d323b6cd18b88880ed6646d

  • SSDEEP

    1536:E3LNmoc00XHZY4xXNTxc+CJFe+smbfexvSuvHyyedgv8pqCxXsEJG6ijoigk:ExmoctNxcBJY+hgSuvyzdaSn+

Score
10/10
redlinesectoprat@keynejkeeinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

@keynejkee

C2

45.14.12.90:52072

Targets

    • Target

      19d20f6312b8ddd3127b5f51b13b891a

    • Size

      99KB

    • MD5

      19d20f6312b8ddd3127b5f51b13b891a

    • SHA1

      b82749db450bd0969c37bf89ebf24a82c99da5be

    • SHA256

      92a1179374c0b225592803d7c31def09ea09e99b85fbe0447641a0b29b1e5c3f

    • SHA512

      1060d19f010239ea9446aae4556ec95914c1058f738419f3b1fead813cb967e420a873b688eb9261c11b4fe7f4820ef04ca896145d323b6cd18b88880ed6646d

    • SSDEEP

      1536:E3LNmoc00XHZY4xXNTxc+CJFe+smbfexvSuvHyyedgv8pqCxXsEJG6ijoigk:ExmoctNxcBJY+hgSuvyzdaSn+

    Score
    10/10
    redlinesectoprat@keynejkeeinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks