Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bec5d09d293e1eb25968e12eb85e6a52ff617a87e2b38e8b01853f29359cedb9

  • Size

    297KB

  • Sample

    241106-tmdm1swjfl

  • MD5

    af40334418156175d56fe4282a606d12

  • SHA1

    a1c623fd234eb5b8f6467d9a521f508e1655ab0c

  • SHA256

    bec5d09d293e1eb25968e12eb85e6a52ff617a87e2b38e8b01853f29359cedb9

  • SHA512

    dafbcc39ae8ac1f66d92805d2c1ee37a376a3561069c33b8621530d5ec0a6fb40336546439460f7f6a4fcb57d9ae0f884cc50235a5d60dcde4187344e255191f

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      bec5d09d293e1eb25968e12eb85e6a52ff617a87e2b38e8b01853f29359cedb9

    • Size

      297KB

    • MD5

      af40334418156175d56fe4282a606d12

    • SHA1

      a1c623fd234eb5b8f6467d9a521f508e1655ab0c

    • SHA256

      bec5d09d293e1eb25968e12eb85e6a52ff617a87e2b38e8b01853f29359cedb9

    • SHA512

      dafbcc39ae8ac1f66d92805d2c1ee37a376a3561069c33b8621530d5ec0a6fb40336546439460f7f6a4fcb57d9ae0f884cc50235a5d60dcde4187344e255191f

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks