Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f0bbff4a16e926f632560071d9d682e9b195b4cbe5805e4298a6df7fc1e314aa

  • Size

    412KB

  • Sample

    241110-kc7cxatcle

  • MD5

    339bbfcf46c5663aaa1978728c260280

  • SHA1

    cccb6a5c9aa4489e7a8dbc7de3ba3f98e0a04b81

  • SHA256

    f0bbff4a16e926f632560071d9d682e9b195b4cbe5805e4298a6df7fc1e314aa

  • SHA512

    620cf5216f30714a3269164ecf98269f201276d5954443adb6060130788bc6c0f24dfe87af8b8d1c69e3cfdc1d77cf1c174f56d15d792255c730c63cb9d6c7d4

  • SSDEEP

    6144:VHRuYwwG/WezaoF2/n7faQfI/DGzv0G7uUjjcrCbYC5tukcQFHU7F:nDwrOePcWQfI/Di8GqU0rvC5tukcY

Malware Config

Extracted

Family

redline

Botnet

money

C2

45.142.215.47:27643

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Targets

    • Target

      f0bbff4a16e926f632560071d9d682e9b195b4cbe5805e4298a6df7fc1e314aa

    • Size

      412KB

    • MD5

      339bbfcf46c5663aaa1978728c260280

    • SHA1

      cccb6a5c9aa4489e7a8dbc7de3ba3f98e0a04b81

    • SHA256

      f0bbff4a16e926f632560071d9d682e9b195b4cbe5805e4298a6df7fc1e314aa

    • SHA512

      620cf5216f30714a3269164ecf98269f201276d5954443adb6060130788bc6c0f24dfe87af8b8d1c69e3cfdc1d77cf1c174f56d15d792255c730c63cb9d6c7d4

    • SSDEEP

      6144:VHRuYwwG/WezaoF2/n7faQfI/DGzv0G7uUjjcrCbYC5tukcQFHU7F:nDwrOePcWQfI/Di8GqU0rvC5tukcY

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks