Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b1309d691e19475051caa2f1346d2f7a23706bca559852d8c420f3f8fbcb557f.exe

  • Size

    297KB

  • Sample

    240616-br74baxdlk

  • MD5

    6e1166af854364a8668e80049abf4cca

  • SHA1

    0832bab61321ec1b2998e7dc99b807c5d51ba5b7

  • SHA256

    b1309d691e19475051caa2f1346d2f7a23706bca559852d8c420f3f8fbcb557f

  • SHA512

    97074c4441dc487b8d398008537ad6f6e77a5c90a75277e76b59a2c785b47e61ec313c9f946c14d5689c2463e1604baaec18a72e37ec098feece9d29d5e6f3a5

  • SSDEEP

    3072:hqFFrqwIOGdTypEmz07s6iCa5hWi/ML6QuhdjETZ2fHgycZqf7D34deqiOLCbBOJ:ABIOG6OiWadATZQzcZqf7DInL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

xXx

C2

185.236.228.125:15140

Targets

    • Target

      b1309d691e19475051caa2f1346d2f7a23706bca559852d8c420f3f8fbcb557f.exe

    • Size

      297KB

    • MD5

      6e1166af854364a8668e80049abf4cca

    • SHA1

      0832bab61321ec1b2998e7dc99b807c5d51ba5b7

    • SHA256

      b1309d691e19475051caa2f1346d2f7a23706bca559852d8c420f3f8fbcb557f

    • SHA512

      97074c4441dc487b8d398008537ad6f6e77a5c90a75277e76b59a2c785b47e61ec313c9f946c14d5689c2463e1604baaec18a72e37ec098feece9d29d5e6f3a5

    • SSDEEP

      3072:hqFFrqwIOGdTypEmz07s6iCa5hWi/ML6QuhdjETZ2fHgycZqf7D34deqiOLCbBOJ:ABIOG6OiWadATZQzcZqf7DInL

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks