Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

1b6fbe993d...e0.exe

windows7-x64

10

1b6fbe993d...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b6fbe993d7dfb1a8eaf0f23dc1b6fe0

  • Size

    310KB

  • Sample

    231230-rtesjsbfh3

  • MD5

    1b6fbe993d7dfb1a8eaf0f23dc1b6fe0

  • SHA1

    7f1df3dc5b16a364f73476c6dc921cf24aeb554f

  • SHA256

    b553f55f881cc835996635ac0daeab9a843fcbd703272d21ce553ed3579b0085

  • SHA512

    456777564a04024e5b06f3c8235a496ceb4af29aa6c13e1b604bf9c9e55aee3b2bd1b54d896e5970f5c361ae171705403fe386e4f60ae4ebab56b77e1517c912

  • SSDEEP

    6144:7LsJAvFwG2hDNX/iYWos24Rh9/kwN/GpiNs4el7BQP79LW/8VoOZR:sGvqG2hDNXZgVh9MwGpWs4eVEK/8R3

Score
10/10
redlinesectoprattestinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

test

C2

193.56.146.78:51487

Targets

    • Target

      1b6fbe993d7dfb1a8eaf0f23dc1b6fe0

    • Size

      310KB

    • MD5

      1b6fbe993d7dfb1a8eaf0f23dc1b6fe0

    • SHA1

      7f1df3dc5b16a364f73476c6dc921cf24aeb554f

    • SHA256

      b553f55f881cc835996635ac0daeab9a843fcbd703272d21ce553ed3579b0085

    • SHA512

      456777564a04024e5b06f3c8235a496ceb4af29aa6c13e1b604bf9c9e55aee3b2bd1b54d896e5970f5c361ae171705403fe386e4f60ae4ebab56b77e1517c912

    • SSDEEP

      6144:7LsJAvFwG2hDNX/iYWos24Rh9/kwN/GpiNs4el7BQP79LW/8VoOZR:sGvqG2hDNXZgVh9MwGpWs4eVEK/8R3

    Score
    10/10
    redlinesectoprattestinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks