Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d5b038cf46fa794fe74aa373a2a3dd6c875ac394d58539445fcd1fd8c9e51b21

  • Size

    423KB

  • Sample

    241109-spxy1awke1

  • MD5

    98b5a90d685b3dfc9e08e2ac5a294ca3

  • SHA1

    ee2b3dcdb92783efa77110ffc5ed61f04d3de7df

  • SHA256

    d5b038cf46fa794fe74aa373a2a3dd6c875ac394d58539445fcd1fd8c9e51b21

  • SHA512

    dd5bcfed2696306198b1c5ef1ae733d8ab3e4d87ebec41075273ed798753cb60f5998984a07d85b2c0e07d38bcc24fb5bac8ccebc1d10e97d39e59b3159ad353

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d5b038cf46fa794fe74aa373a2a3dd6c875ac394d58539445fcd1fd8c9e51b21

    • Size

      423KB

    • MD5

      98b5a90d685b3dfc9e08e2ac5a294ca3

    • SHA1

      ee2b3dcdb92783efa77110ffc5ed61f04d3de7df

    • SHA256

      d5b038cf46fa794fe74aa373a2a3dd6c875ac394d58539445fcd1fd8c9e51b21

    • SHA512

      dd5bcfed2696306198b1c5ef1ae733d8ab3e4d87ebec41075273ed798753cb60f5998984a07d85b2c0e07d38bcc24fb5bac8ccebc1d10e97d39e59b3159ad353

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks