Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    52add8ee557ca03af4d8e4e647a51f3854b6394c2fe262a1ee6d7a6f23fad589

  • Size

    297KB

  • Sample

    241109-dpmqpswemf

  • MD5

    28a9f9c04cc5c0715cda8791f2b6b984

  • SHA1

    fa3e1e48401720678b324c4759ac08284edd32c1

  • SHA256

    52add8ee557ca03af4d8e4e647a51f3854b6394c2fe262a1ee6d7a6f23fad589

  • SHA512

    0daf96513c501802fc3a572a06aa055ec1a8350ff4a1d9e1fcdce2cf7a0cc8a5b800fbbfa37510821e16743ff5b95dd01d44c75152626c28bc61922006aad14e

  • SSDEEP

    6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      52add8ee557ca03af4d8e4e647a51f3854b6394c2fe262a1ee6d7a6f23fad589

    • Size

      297KB

    • MD5

      28a9f9c04cc5c0715cda8791f2b6b984

    • SHA1

      fa3e1e48401720678b324c4759ac08284edd32c1

    • SHA256

      52add8ee557ca03af4d8e4e647a51f3854b6394c2fe262a1ee6d7a6f23fad589

    • SHA512

      0daf96513c501802fc3a572a06aa055ec1a8350ff4a1d9e1fcdce2cf7a0cc8a5b800fbbfa37510821e16743ff5b95dd01d44c75152626c28bc61922006aad14e

    • SSDEEP

      6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.