Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2adb915bc0f1e4f1ff399d1378d8ae089517ab937637c808e4ef50ff02f9c788

  • Size

    427KB

  • Sample

    241108-s1teysxlgk

  • MD5

    850dc6cd87a60465b6af34270dfe1822

  • SHA1

    b391d1bf1a5eb4c75cdb1743618d54477650d69e

  • SHA256

    2adb915bc0f1e4f1ff399d1378d8ae089517ab937637c808e4ef50ff02f9c788

  • SHA512

    4dea661a6a27f3b21bc8098792060781988b709b9da3cdbf5901a2b70b0033e0d8d67186b7434cdb33bddbdddbcd382d615c81bde103e6f01e8d52c43b178ca8

  • SSDEEP

    6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2adb915bc0f1e4f1ff399d1378d8ae089517ab937637c808e4ef50ff02f9c788

    • Size

      427KB

    • MD5

      850dc6cd87a60465b6af34270dfe1822

    • SHA1

      b391d1bf1a5eb4c75cdb1743618d54477650d69e

    • SHA256

      2adb915bc0f1e4f1ff399d1378d8ae089517ab937637c808e4ef50ff02f9c788

    • SHA512

      4dea661a6a27f3b21bc8098792060781988b709b9da3cdbf5901a2b70b0033e0d8d67186b7434cdb33bddbdddbcd382d615c81bde103e6f01e8d52c43b178ca8

    • SSDEEP

      6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks