Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2380-9-0x0000000000400000-0x0000000000452000-memory.dmp

  • Size

    328KB

  • MD5

    7b3c784d6c194ec6cbb7eeb2d04996fa

  • SHA1

    dcc57eade6eb89168e78b950271804c6b843d0e3

  • SHA256

    2fea51b1cd65ffbf6feaeb8e1a13de78e99cf963fd8ad4cc2ddc74ba19940bea

  • SHA512

    22db80ee4e7429530acf0e9b8d8b590294d4e15b354719d2c097cc55f4313a97be5aac7cb1e63765e160427c67f5442a8368937727adbd52103250e42419bb47

  • SSDEEP

    3072:+q6EgY6ifrUjjbmYwPhXh4UjTAjtESi3kcZqf7D34deqiOLibBOa:lqY6i8wPP4UjTAJEpkcZqf7DInL

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

147.45.47.36:14537

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2380-9-0x0000000000400000-0x0000000000452000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections