Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8fe84606d06ffc102b69c84083fbc0b764cae5c241ddd3521a6175550d149274

  • Size

    297KB

  • Sample

    241110-nadvcsymfp

  • MD5

    c956312a3d05542b09571893c48e939e

  • SHA1

    acaeed92cbcb9de567ca6e944037cb4e7da6ff21

  • SHA256

    8fe84606d06ffc102b69c84083fbc0b764cae5c241ddd3521a6175550d149274

  • SHA512

    06fa6bb69c38689139c3d3a6e96c4679ed06841910d722f94ff3f38f74bf2afccaeb4f97651afb5cd9d3f345d0e727ad090b66ac24e91ccd6ad507d9e172a54c

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8fe84606d06ffc102b69c84083fbc0b764cae5c241ddd3521a6175550d149274

    • Size

      297KB

    • MD5

      c956312a3d05542b09571893c48e939e

    • SHA1

      acaeed92cbcb9de567ca6e944037cb4e7da6ff21

    • SHA256

      8fe84606d06ffc102b69c84083fbc0b764cae5c241ddd3521a6175550d149274

    • SHA512

      06fa6bb69c38689139c3d3a6e96c4679ed06841910d722f94ff3f38f74bf2afccaeb4f97651afb5cd9d3f345d0e727ad090b66ac24e91ccd6ad507d9e172a54c

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks