Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    18d9a8feb78345c89735ffe4704623ace837ff57dc9506d65f2d9e9fa9f13bd9

  • Size

    360KB

  • Sample

    241111-b4dp8szbmn

  • MD5

    7e2e075808493691f9f64ef8ddaf8386

  • SHA1

    8e02fa7a386a6340d54f54511be464ea8d325946

  • SHA256

    18d9a8feb78345c89735ffe4704623ace837ff57dc9506d65f2d9e9fa9f13bd9

  • SHA512

    0d8acbc733c3a811a1ce78bfec1993573303937ccd6a2e3220b25e6901dc8472f479f3fbc4a4121fb0c0a9147c3a2a32284c08bd9bc0dc28d87103e91daaafa7

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      18d9a8feb78345c89735ffe4704623ace837ff57dc9506d65f2d9e9fa9f13bd9

    • Size

      360KB

    • MD5

      7e2e075808493691f9f64ef8ddaf8386

    • SHA1

      8e02fa7a386a6340d54f54511be464ea8d325946

    • SHA256

      18d9a8feb78345c89735ffe4704623ace837ff57dc9506d65f2d9e9fa9f13bd9

    • SHA512

      0d8acbc733c3a811a1ce78bfec1993573303937ccd6a2e3220b25e6901dc8472f479f3fbc4a4121fb0c0a9147c3a2a32284c08bd9bc0dc28d87103e91daaafa7

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks