Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9115677abd44ce89dde29c1b9bddeffff32ba6c8c7bac42090facf075eb487fd
-
Size
300KB
-
Sample
220916-2ll7rscfdq
-
MD5
07c209d0c5735ccb40e429f9296eb277
-
SHA1
d1b451db40f173f5310126cbd8284147ec5eda02
-
SHA256
9115677abd44ce89dde29c1b9bddeffff32ba6c8c7bac42090facf075eb487fd
-
SHA512
747127ce8377c974158181d52392bff265351ec179767b40cca05f49b99d369343f8c3e26694364df210255fb3e2556f412026293241861115cd53a51f834aca
-
SSDEEP
6144:vwnsL5FbOB5jzO9cgNJvEb0I5nigabwVf:IsNFKXja9ZvTI5i
Static task
static1
Malware Config
Extracted
danabot
103.144.139.228:443
213.227.154.98:443
66.85.147.23:443
153.92.223.225:443
-
embedded_hash
A64A3A6ED13022027B84C77D31BE0C74
-
type
loader
Targets
-
-
Target
9115677abd44ce89dde29c1b9bddeffff32ba6c8c7bac42090facf075eb487fd
-
Size
300KB
-
MD5
07c209d0c5735ccb40e429f9296eb277
-
SHA1
d1b451db40f173f5310126cbd8284147ec5eda02
-
SHA256
9115677abd44ce89dde29c1b9bddeffff32ba6c8c7bac42090facf075eb487fd
-
SHA512
747127ce8377c974158181d52392bff265351ec179767b40cca05f49b99d369343f8c3e26694364df210255fb3e2556f412026293241861115cd53a51f834aca
-
SSDEEP
6144:vwnsL5FbOB5jzO9cgNJvEb0I5nigabwVf:IsNFKXja9ZvTI5i
-
Detects Smokeloader packer
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-