Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
https://github.com//twitty1xnem/w-warthunderw/releases/download/cfhvs7k7qp/un.rar
-
Sample
240726-ssc31awckj
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com//twitty1xnem/w-warthunderw/releases/download/cfhvs7k7qp/un.rar
Resource
win10v2004-20240709-en
23 signatures
150 seconds
Malware Config
Extracted
Family
redline
C2
185.196.9.26:6302
Targets
-
-
Target
https://github.com//twitty1xnem/w-warthunderw/releases/download/cfhvs7k7qp/un.rar
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
XMRig Miner payload
-
Blocklisted process makes network request
-
Creates new service(s)
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-