Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bdad362f6ca374432e8bdfcc2206e996f23e8bea90e17634d6a18a7d2a5521ed

  • Size

    423KB

  • Sample

    241109-rsmrrswemn

  • MD5

    0a11ea6e096e7c8792b9cf7f32d5428f

  • SHA1

    379bdb96919c3f995f5d5ac8d505b1028c07a457

  • SHA256

    bdad362f6ca374432e8bdfcc2206e996f23e8bea90e17634d6a18a7d2a5521ed

  • SHA512

    73c2f507ad933d6d0bd03a23f04f820bb544ea9236f7a04f656d777699f73bb03989bbbc65e5541f048b66266cebd85507e7905679dafa7f52e21ad1ee228f36

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      bdad362f6ca374432e8bdfcc2206e996f23e8bea90e17634d6a18a7d2a5521ed

    • Size

      423KB

    • MD5

      0a11ea6e096e7c8792b9cf7f32d5428f

    • SHA1

      379bdb96919c3f995f5d5ac8d505b1028c07a457

    • SHA256

      bdad362f6ca374432e8bdfcc2206e996f23e8bea90e17634d6a18a7d2a5521ed

    • SHA512

      73c2f507ad933d6d0bd03a23f04f820bb544ea9236f7a04f656d777699f73bb03989bbbc65e5541f048b66266cebd85507e7905679dafa7f52e21ad1ee228f36

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks