Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    98f20432114fb638c339234d79bc8fd4dc0f76acad4f8c59bc1de5afda1784e3

  • Size

    207KB

  • Sample

    240417-ry87yscc89

  • MD5

    acf114dafa9e5dd6c8d83ef8b9f9bd89

  • SHA1

    bcff2307c86df1d743215e2991f423138532e791

  • SHA256

    98f20432114fb638c339234d79bc8fd4dc0f76acad4f8c59bc1de5afda1784e3

  • SHA512

    5f1a3f002af044948bbddfa48e74f6008300d9d48048fe904e73c4ef42134179c6c25604b781efe6d955d144f302de610dbb887cf9031ea2b33fb4fc60165165

  • SSDEEP

    6144:gmEqkKqrp3zcy88y/+20meAavHs0wgkH3tQx:crpFL2tOFwptA

Score
10/10

Malware Config

Targets

    • Target

      b2c593216ac245518637d7932754c4c1128f6c331a601853b4e3c6d01a9dc088.exe

    • Size

      305KB

    • MD5

      c03f9fb59cd25d59cb01580c35c62628

    • SHA1

      0af6d27cf52b7a700344355d645819a9713c8f9f

    • SHA256

      b2c593216ac245518637d7932754c4c1128f6c331a601853b4e3c6d01a9dc088

    • SHA512

      8704d778103b948bd3b826111259b59e1b17d1589818923d6dd01b3c1918c4a6357cd9a62e03776d7c1927dfac199b6ed491006cddb772b22e4019af14572c9c

    • SSDEEP

      6144:/jOkC7ObDqTMm2f48xJTukf8CcMbjI3hz/uyZkWv:/wa9m2f48xJTukvcMvhyZkW

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks