Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9764ba7dd20702f5a56f722576ad3d3bef90e21fc9d5a9cd84440c23315aa61c

  • Size

    423KB

  • Sample

    241105-kdwykaydrk

  • MD5

    2d6b02c7f5e70e4ad1c1d199ec3e32ef

  • SHA1

    3ab2c7a19b634354d44e4f07a447d27f691dbb8c

  • SHA256

    9764ba7dd20702f5a56f722576ad3d3bef90e21fc9d5a9cd84440c23315aa61c

  • SHA512

    96f2ad330f3ee1e86dfb0c583ba7634cd2fdd7f68559ea365e9c49b898f23a492b2366c5c7701fb528faced2a2d8175f4164a59d69e7f667504072c4df27466b

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      9764ba7dd20702f5a56f722576ad3d3bef90e21fc9d5a9cd84440c23315aa61c

    • Size

      423KB

    • MD5

      2d6b02c7f5e70e4ad1c1d199ec3e32ef

    • SHA1

      3ab2c7a19b634354d44e4f07a447d27f691dbb8c

    • SHA256

      9764ba7dd20702f5a56f722576ad3d3bef90e21fc9d5a9cd84440c23315aa61c

    • SHA512

      96f2ad330f3ee1e86dfb0c583ba7634cd2fdd7f68559ea365e9c49b898f23a492b2366c5c7701fb528faced2a2d8175f4164a59d69e7f667504072c4df27466b

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks