Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2396-10-0x0000000000400000-0x0000000000452000-memory.dmp

  • Size

    328KB

  • MD5

    de84a61caa88cb382ce137d50f2d004f

  • SHA1

    87885c92c80245e74996a74a078aac294360fd4a

  • SHA256

    fbdda6d03c62274dd63e246193503cf3a89aa8186315b7eea17ed253d37d4815

  • SHA512

    772dfdc473139aab51a551175f5a19247b3fde05b319c159c105922db2230d5ce5b925276d92bf4943fa3c19fc98da392db105062c5ee2a9194d6eaeffd193b3

  • SSDEEP

    3072:Qq6EgY6iHrUj1DeewPMRyo0kaa5CDdHDLPaAGtASKrIcZqf7D34teqiOLibBOB:TqY6iwwPloYDLPaAiAdIcZqf7DIXL

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

147.45.47.251:2149

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2396-10-0x0000000000400000-0x0000000000452000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections