Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    091432c494a38b9ec474bfc8ccb15f23d5b214164c298f73b419de83895b7619

  • Size

    428KB

  • Sample

    241109-ylvmcs1crc

  • MD5

    c1db474a7cb50415acc8b5b594d03b79

  • SHA1

    e9fdae4d79299a99e230e161c2d67c466b3ea2c6

  • SHA256

    091432c494a38b9ec474bfc8ccb15f23d5b214164c298f73b419de83895b7619

  • SHA512

    a9ee4f6e9587a7956dcd577231852b2270cf4ebc3169ee654de8c74cd09d6d0ef9e18ab557b1556cefe83c76e3e24b477882231254e4bafb4862740a76faa60d

  • SSDEEP

    6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      091432c494a38b9ec474bfc8ccb15f23d5b214164c298f73b419de83895b7619

    • Size

      428KB

    • MD5

      c1db474a7cb50415acc8b5b594d03b79

    • SHA1

      e9fdae4d79299a99e230e161c2d67c466b3ea2c6

    • SHA256

      091432c494a38b9ec474bfc8ccb15f23d5b214164c298f73b419de83895b7619

    • SHA512

      a9ee4f6e9587a7956dcd577231852b2270cf4ebc3169ee654de8c74cd09d6d0ef9e18ab557b1556cefe83c76e3e24b477882231254e4bafb4862740a76faa60d

    • SSDEEP

      6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks