Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...3c.exe

windows7-x64

10

JaffaCakes...3c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_61068a5a585f401c41cca28266599d3c

  • Size

    282KB

  • Sample

    250107-nxp6xa1qcr

  • MD5

    61068a5a585f401c41cca28266599d3c

  • SHA1

    5e91a8aac765b1452b8553050d6b1227f2f9b94a

  • SHA256

    862f9950354678bc315fc2832d213cfd518c36c1e5c2e429c161191713cd7a5f

  • SHA512

    aa2845bbe5014a6075f84a4d51a21535c05f0897e8b93bccb186ab17e01abf405027b773129cef7bf85fc7b876e7807a0906dae7e3b01fac9f091180d5e0a57d

  • SSDEEP

    3072:TXmC5EiUWpDw1DjN24JPEk7HZrDnsXA8g261fY:TAFdvEgT

Score
10/10
redline@guveizlogsdiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

@GuveizLogs

C2

hangotouic.xyz:80

Attributes
  • auth_value

    2e63ba3bc356f01ff241cf4dec9b072c

Targets

    • Target

      JaffaCakes118_61068a5a585f401c41cca28266599d3c

    • Size

      282KB

    • MD5

      61068a5a585f401c41cca28266599d3c

    • SHA1

      5e91a8aac765b1452b8553050d6b1227f2f9b94a

    • SHA256

      862f9950354678bc315fc2832d213cfd518c36c1e5c2e429c161191713cd7a5f

    • SHA512

      aa2845bbe5014a6075f84a4d51a21535c05f0897e8b93bccb186ab17e01abf405027b773129cef7bf85fc7b876e7807a0906dae7e3b01fac9f091180d5e0a57d

    • SSDEEP

      3072:TXmC5EiUWpDw1DjN24JPEk7HZrDnsXA8g261fY:TAFdvEgT

    Score
    10/10
    redline@guveizlogsdiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks