Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ca1eeb1ed6c16dc5bd03b199b74917e3.bin

  • Size

    43KB

  • Sample

    241206-b95e5szlel

  • MD5

    141ec3d4228f39e3a8ac7b1058270066

  • SHA1

    5aadfd96954ec1d97e6ad0b06636074f9cd48d22

  • SHA256

    cc2a86cb0b8c4ecc76cd3c888c38d9c7eab251794bb735854eff9bcc90b9c295

  • SHA512

    3854bba915e856530fe30ae270744c5b03cf0a493f5295fde47b8b8aabd9545fb194c14c6eb28ae0b684df57adcab42ed2ff7417e32ab71f601ea350f1476c76

  • SSDEEP

    768:sCJ/v7FGTS8mP4fLE4YuupPfbzEcrNT/U/tFueemhiGLq2kZPt0AyZPVll:x8BmP+LXQ5BItMG+2+2AyZbl

Malware Config

Extracted

Family

redline

Botnet

SSA

C2

216.122.187.249:55123

Targets

    • Target

      12d325c2093d5b17b5bd4dfc95247028b72998f1e6a7f4a7743b15edf652ac96.exe

    • Size

      95KB

    • MD5

      ca1eeb1ed6c16dc5bd03b199b74917e3

    • SHA1

      646e48f5093fe53a4045386adc9bc7973df6b42a

    • SHA256

      12d325c2093d5b17b5bd4dfc95247028b72998f1e6a7f4a7743b15edf652ac96

    • SHA512

      69f443b73335ba801fbb3f9b1de28f77d66218c8cc565529f380786fb340af3db94f5cf4bafe7f76b3f9f517800fdac03d04dfc1e9e2ceff42efe31512ed35fe

    • SSDEEP

      1536:mqsa9qRhlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2DteulgS6p0:UqWnY3+zi0ZbYe1g0ujyzd/0

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks