Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    95a4f5f499061249871df49649fb053f2a30e8e418a453ef51d511c04fd4a3d4

  • Size

    469KB

  • Sample

    241110-j37kxstarh

  • MD5

    0ddc5a673fecda5c0fa0d65dbf5a6ffe

  • SHA1

    5b28cf48cbe1b94cef0834bf3bc980ced4391977

  • SHA256

    95a4f5f499061249871df49649fb053f2a30e8e418a453ef51d511c04fd4a3d4

  • SHA512

    49a1fd9d8547c1038c40ba9229db258644564456e1025150ac0b962fc376ffe0e622b6c7522320c8f6faef4802a0f7f5555233473450d3024a441814255e63a2

  • SSDEEP

    12288:qMrmy900+lH2b++7XZ59LrFVnUXlgSfYOugz5:Qyals++X9/FS1bpugl

Malware Config

Extracted

Family

redline

Botnet

fukia

C2

193.233.20.13:4136

Attributes
  • auth_value

    e5783636fbd9e4f0cf9a017bce02e67e

Targets

    • Target

      95a4f5f499061249871df49649fb053f2a30e8e418a453ef51d511c04fd4a3d4

    • Size

      469KB

    • MD5

      0ddc5a673fecda5c0fa0d65dbf5a6ffe

    • SHA1

      5b28cf48cbe1b94cef0834bf3bc980ced4391977

    • SHA256

      95a4f5f499061249871df49649fb053f2a30e8e418a453ef51d511c04fd4a3d4

    • SHA512

      49a1fd9d8547c1038c40ba9229db258644564456e1025150ac0b962fc376ffe0e622b6c7522320c8f6faef4802a0f7f5555233473450d3024a441814255e63a2

    • SSDEEP

      12288:qMrmy900+lH2b++7XZ59LrFVnUXlgSfYOugz5:Qyals++X9/FS1bpugl

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks