Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2a62e42860666292113de094d8f29dcbb733a163e05db301b28a975bf22916c3

  • Size

    297KB

  • Sample

    241109-s13nmaxdlk

  • MD5

    2de2a7fc4ccf08b45157d25bcba4f0f1

  • SHA1

    ba62f81c65a7bd8e358e6468a7a44c5462955476

  • SHA256

    2a62e42860666292113de094d8f29dcbb733a163e05db301b28a975bf22916c3

  • SHA512

    0b5db569287ff8e0e8edb4c4483a6c52bd8415fe98f771845d770aa0b12af35f7c3c0bc6cae8d2b63d26d0c295a7e8afd921731ba22a7c58b2abb68ec7e84b9b

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      2a62e42860666292113de094d8f29dcbb733a163e05db301b28a975bf22916c3

    • Size

      297KB

    • MD5

      2de2a7fc4ccf08b45157d25bcba4f0f1

    • SHA1

      ba62f81c65a7bd8e358e6468a7a44c5462955476

    • SHA256

      2a62e42860666292113de094d8f29dcbb733a163e05db301b28a975bf22916c3

    • SHA512

      0b5db569287ff8e0e8edb4c4483a6c52bd8415fe98f771845d770aa0b12af35f7c3c0bc6cae8d2b63d26d0c295a7e8afd921731ba22a7c58b2abb68ec7e84b9b

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks