Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2398c853c73b9755ae9f08daa3b50e27

  • Size

    407KB

  • Sample

    241111-cfyk6syrfx

  • MD5

    2398c853c73b9755ae9f08daa3b50e27

  • SHA1

    55c2ba8c216a3386afc9caa58d317ea8cd5bd5cd

  • SHA256

    b1d5cab183560415d10ed5ab4f02b35df108b422e1dc448c8f3999f0a0b8b131

  • SHA512

    df3ea09dd94d8fce3416dd4085ad2bfc9059a5e3e176e2d3a918ba6267ba4699ad53364883df564f1c7a1687e0fb55cc52c58909a1b89b60b4ac7b6505c7fad0

  • SSDEEP

    12288:Mz/G7MTsPu4K4agKj2wVomkFhGp9/4v6KEwYF2:ysPedSNmQG/4bNYc

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      2398c853c73b9755ae9f08daa3b50e27

    • Size

      407KB

    • MD5

      2398c853c73b9755ae9f08daa3b50e27

    • SHA1

      55c2ba8c216a3386afc9caa58d317ea8cd5bd5cd

    • SHA256

      b1d5cab183560415d10ed5ab4f02b35df108b422e1dc448c8f3999f0a0b8b131

    • SHA512

      df3ea09dd94d8fce3416dd4085ad2bfc9059a5e3e176e2d3a918ba6267ba4699ad53364883df564f1c7a1687e0fb55cc52c58909a1b89b60b4ac7b6505c7fad0

    • SSDEEP

      12288:Mz/G7MTsPu4K4agKj2wVomkFhGp9/4v6KEwYF2:ysPedSNmQG/4bNYc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks