Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    acdc98da4f1d407503e65f51d21c15ef1636960de0adf4d7c64fa776a1524cee

  • Size

    370KB

  • Sample

    241108-ssramavcrn

  • MD5

    bccbf0df97b6d1f3e83c5f4a7719af90

  • SHA1

    5e36631fea2910da5d004515968fbf54b00a763f

  • SHA256

    acdc98da4f1d407503e65f51d21c15ef1636960de0adf4d7c64fa776a1524cee

  • SHA512

    cba62d94ad773c65e8f9dd78a23faa6f25cb9c5d1734b21fec3642c26bd7fa18977aa09d99a8aad09069f7a647945b4bd35dc0651d514087bac37f63e674d323

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      acdc98da4f1d407503e65f51d21c15ef1636960de0adf4d7c64fa776a1524cee

    • Size

      370KB

    • MD5

      bccbf0df97b6d1f3e83c5f4a7719af90

    • SHA1

      5e36631fea2910da5d004515968fbf54b00a763f

    • SHA256

      acdc98da4f1d407503e65f51d21c15ef1636960de0adf4d7c64fa776a1524cee

    • SHA512

      cba62d94ad773c65e8f9dd78a23faa6f25cb9c5d1734b21fec3642c26bd7fa18977aa09d99a8aad09069f7a647945b4bd35dc0651d514087bac37f63e674d323

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks