Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6601c821fc92830b295cfa69de35937d7525c863e2a8a93ae15442ca30fb6d79

  • Size

    371KB

  • Sample

    241105-f3blpsxrbn

  • MD5

    b35d605b867dc6defa9464ec7fd532d5

  • SHA1

    fc5e84051800d19feee81582cbca3a015724705b

  • SHA256

    6601c821fc92830b295cfa69de35937d7525c863e2a8a93ae15442ca30fb6d79

  • SHA512

    89ffc7c3afb5e489c7fc0c9e5f8378ca67d5eadb6e32751480b740b1bb18f73dca1f21add6aceae59965d894b643b366ed0ef802906b8ecef138231d8735facc

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6601c821fc92830b295cfa69de35937d7525c863e2a8a93ae15442ca30fb6d79

    • Size

      371KB

    • MD5

      b35d605b867dc6defa9464ec7fd532d5

    • SHA1

      fc5e84051800d19feee81582cbca3a015724705b

    • SHA256

      6601c821fc92830b295cfa69de35937d7525c863e2a8a93ae15442ca30fb6d79

    • SHA512

      89ffc7c3afb5e489c7fc0c9e5f8378ca67d5eadb6e32751480b740b1bb18f73dca1f21add6aceae59965d894b643b366ed0ef802906b8ecef138231d8735facc

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks