Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

482ff39ce2...d7.exe

windows7-x64

10

482ff39ce2...d7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    482ff39ce271dff3ca9f31dce9e504d7

  • Size

    395KB

  • Sample

    231226-bjszesadg9

  • MD5

    482ff39ce271dff3ca9f31dce9e504d7

  • SHA1

    5a0c8ca7eb44e07809064a4bea5f8a158bcaf6c2

  • SHA256

    62a050d59c89ba86e7c6904843051bc59c930f2b9b19f0cb95370daf243c9550

  • SHA512

    5d69c4f0f8cdddc4a1c51940c3028874bcb72deca490df01be0a82dcb17e32aaa4f188a3f6e842f9193a555a8955cc659ba160f76b3a3c9778f66e4813a8a948

  • SSDEEP

    12288:ikyLrgFsA2zL3HveqmASGecu39EyjrO9GXi:GgFsA2zDsGkNEy+6

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      482ff39ce271dff3ca9f31dce9e504d7

    • Size

      395KB

    • MD5

      482ff39ce271dff3ca9f31dce9e504d7

    • SHA1

      5a0c8ca7eb44e07809064a4bea5f8a158bcaf6c2

    • SHA256

      62a050d59c89ba86e7c6904843051bc59c930f2b9b19f0cb95370daf243c9550

    • SHA512

      5d69c4f0f8cdddc4a1c51940c3028874bcb72deca490df01be0a82dcb17e32aaa4f188a3f6e842f9193a555a8955cc659ba160f76b3a3c9778f66e4813a8a948

    • SSDEEP

      12288:ikyLrgFsA2zL3HveqmASGecu39EyjrO9GXi:GgFsA2zDsGkNEy+6

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks