Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d30c39fba040fff4e671659fd820bea5_JaffaCakes118

  • Size

    100KB

  • Sample

    241207-scmx9swjdz

  • MD5

    d30c39fba040fff4e671659fd820bea5

  • SHA1

    0dd404bf7d00612a07877ee5f4ba5a3bc372e56e

  • SHA256

    f71f0de38383770863aa650280e175b07f271fd593b8f36d8db866ad6893eae3

  • SHA512

    8658d546ab126c310b2c932623501fa52a607a65177e524ee29d3c9ed541149c8e67a48a2f1b3584645d1af95955010be37f0205fb89fb5afe4269a176a52c07

  • SSDEEP

    1536:6o6aGDoCmogKd8jdYXJvFopkY5zaul6wbgbue7vRuvNyAsdEjetx5REbG6WAaoif:6dxMChdK+2erj3RulyddLNWBW

Malware Config

Extracted

Family

redline

C2

45.14.49.111:26475

Targets

    • Target

      d30c39fba040fff4e671659fd820bea5_JaffaCakes118

    • Size

      100KB

    • MD5

      d30c39fba040fff4e671659fd820bea5

    • SHA1

      0dd404bf7d00612a07877ee5f4ba5a3bc372e56e

    • SHA256

      f71f0de38383770863aa650280e175b07f271fd593b8f36d8db866ad6893eae3

    • SHA512

      8658d546ab126c310b2c932623501fa52a607a65177e524ee29d3c9ed541149c8e67a48a2f1b3584645d1af95955010be37f0205fb89fb5afe4269a176a52c07

    • SSDEEP

      1536:6o6aGDoCmogKd8jdYXJvFopkY5zaul6wbgbue7vRuvNyAsdEjetx5REbG6WAaoif:6dxMChdK+2erj3RulyddLNWBW

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks