Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    983386c4033951a70166b60d2313fd72f6ccfd52d3f3078bb2eb36fc327dfacd

  • Size

    383KB

  • Sample

    241111-dgjdbavkhp

  • MD5

    0c6c559ba1d9b2e37778e84df22307f4

  • SHA1

    8e959229bd834447fbd62a314f081de932638be6

  • SHA256

    983386c4033951a70166b60d2313fd72f6ccfd52d3f3078bb2eb36fc327dfacd

  • SHA512

    9ff0c01e23f97f511610f5b991fa9684e3a2fc934141b63c3ced42991e7ed4e4e644181e6db55ba980731295c1510b21cc0423415ccf5eea6e75149b9d37f92a

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      983386c4033951a70166b60d2313fd72f6ccfd52d3f3078bb2eb36fc327dfacd

    • Size

      383KB

    • MD5

      0c6c559ba1d9b2e37778e84df22307f4

    • SHA1

      8e959229bd834447fbd62a314f081de932638be6

    • SHA256

      983386c4033951a70166b60d2313fd72f6ccfd52d3f3078bb2eb36fc327dfacd

    • SHA512

      9ff0c01e23f97f511610f5b991fa9684e3a2fc934141b63c3ced42991e7ed4e4e644181e6db55ba980731295c1510b21cc0423415ccf5eea6e75149b9d37f92a

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks