Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f63bdc068c453e7e22740681a0c280d02745807b1695ce86e5067069beca533e

  • Size

    541KB

  • Sample

    240319-xfcnxscc8w

  • MD5

    3b069f3dd741e4360f26cb27cb10320a

  • SHA1

    6a9503aaf1e297f2696482ddf1bd4605a8710101

  • SHA256

    f63bdc068c453e7e22740681a0c280d02745807b1695ce86e5067069beca533e

  • SHA512

    bda58c074f7bd5171d7e3188a48cbdc457607ff06045e64a9e8e33fcb6f66f941d75a7bf57eb0ef262491622b4a9936342384237fa61c1add3365d5006c6d0d9

  • SSDEEP

    12288:q5aw1dGYJeEVZjYGcN3CNIb88WsNMP5F1k:qLVRYGW3CNIb88WsNMhF

Malware Config

Targets

    • Target

      f63bdc068c453e7e22740681a0c280d02745807b1695ce86e5067069beca533e

    • Size

      541KB

    • MD5

      3b069f3dd741e4360f26cb27cb10320a

    • SHA1

      6a9503aaf1e297f2696482ddf1bd4605a8710101

    • SHA256

      f63bdc068c453e7e22740681a0c280d02745807b1695ce86e5067069beca533e

    • SHA512

      bda58c074f7bd5171d7e3188a48cbdc457607ff06045e64a9e8e33fcb6f66f941d75a7bf57eb0ef262491622b4a9936342384237fa61c1add3365d5006c6d0d9

    • SSDEEP

      12288:q5aw1dGYJeEVZjYGcN3CNIb88WsNMP5F1k:qLVRYGW3CNIb88WsNMhF

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks