Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    423034d46b94fdd3a998c355d605e1dcb8699d66b15940452acf86efeeeb4068

  • Size

    297KB

  • Sample

    241109-3js3zaxmbp

  • MD5

    35d90b6c6361ebfa7d1d5fb23ca7e000

  • SHA1

    c5c829c5f9794a3753c777c6774a0d5dc5754dec

  • SHA256

    423034d46b94fdd3a998c355d605e1dcb8699d66b15940452acf86efeeeb4068

  • SHA512

    099fc2ab561d4150b2090c15b5c9dc3b3b7d0456aaff05964731aaf0fe2c5d8931f6662ddd93bf9fba6089a0393b849a69f40363b1b13b66d1dd0474816d5c1f

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      423034d46b94fdd3a998c355d605e1dcb8699d66b15940452acf86efeeeb4068

    • Size

      297KB

    • MD5

      35d90b6c6361ebfa7d1d5fb23ca7e000

    • SHA1

      c5c829c5f9794a3753c777c6774a0d5dc5754dec

    • SHA256

      423034d46b94fdd3a998c355d605e1dcb8699d66b15940452acf86efeeeb4068

    • SHA512

      099fc2ab561d4150b2090c15b5c9dc3b3b7d0456aaff05964731aaf0fe2c5d8931f6662ddd93bf9fba6089a0393b849a69f40363b1b13b66d1dd0474816d5c1f

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks