Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    65ce5c5708620e7ff74e8714af9e2730644611d7

  • Size

    310KB

  • Sample

    241111-b4r8mazbnq

  • MD5

    e2fa678691c92453cf399c1da36b35af

  • SHA1

    65ce5c5708620e7ff74e8714af9e2730644611d7

  • SHA256

    adf00b954a3459acc8bbb653200a27f7f40347b145312c4190d15fb17d53d3a3

  • SHA512

    8a333aab000962a8da6a4c0870fbfc7392be92eff342f456ef0ec459d3829aa53255a3e0f26304634e8d4e0065c204fc755b9951f044ff7374f73af78ece2527

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      65ce5c5708620e7ff74e8714af9e2730644611d7

    • Size

      310KB

    • MD5

      e2fa678691c92453cf399c1da36b35af

    • SHA1

      65ce5c5708620e7ff74e8714af9e2730644611d7

    • SHA256

      adf00b954a3459acc8bbb653200a27f7f40347b145312c4190d15fb17d53d3a3

    • SHA512

      8a333aab000962a8da6a4c0870fbfc7392be92eff342f456ef0ec459d3829aa53255a3e0f26304634e8d4e0065c204fc755b9951f044ff7374f73af78ece2527

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks