Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    47e21ddc3a9c6ba14d207bd23cd5dd155df00f3952f9e25c3f962b944bf89288

  • Size

    1.1MB

  • Sample

    240502-gk73maae8y

  • MD5

    e2ddbc9770edb5ec6528f89c52c893a4

  • SHA1

    e3b664e167219368c232fe0d4003c889414f94bd

  • SHA256

    47e21ddc3a9c6ba14d207bd23cd5dd155df00f3952f9e25c3f962b944bf89288

  • SHA512

    ee609adb22a89fb9460234e31ba8bbf9d06452c3e713b85f543cf1d4dcd814a73e7794b71ece7ddbddf3342e948d76fc16a095f7fbbca522780efa22c9d3e815

  • SSDEEP

    12288:floH6cfu3Yp9M8iCNC8y0L5gagKYDZB/DEwP+umyIyT0kQGerEoQKl9cIiE+h:CHhfu3Yp9M8iCQ895yBDZB/zWGeAoZ

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

194.169.175.234:27221

Targets

    • Target

      47e21ddc3a9c6ba14d207bd23cd5dd155df00f3952f9e25c3f962b944bf89288

    • Size

      1.1MB

    • MD5

      e2ddbc9770edb5ec6528f89c52c893a4

    • SHA1

      e3b664e167219368c232fe0d4003c889414f94bd

    • SHA256

      47e21ddc3a9c6ba14d207bd23cd5dd155df00f3952f9e25c3f962b944bf89288

    • SHA512

      ee609adb22a89fb9460234e31ba8bbf9d06452c3e713b85f543cf1d4dcd814a73e7794b71ece7ddbddf3342e948d76fc16a095f7fbbca522780efa22c9d3e815

    • SSDEEP

      12288:floH6cfu3Yp9M8iCNC8y0L5gagKYDZB/DEwP+umyIyT0kQGerEoQKl9cIiE+h:CHhfu3Yp9M8iCQ895yBDZB/zWGeAoZ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks