Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d03171dc963ea9b515df71085f3a713ab9870a2eeacf5f0edd92c351f5f53fbe

  • Size

    291KB

  • Sample

    230319-v3l5rsbe2y

  • MD5

    2f418c25c97b329fb8d04fce58bae98c

  • SHA1

    58975f876c072ed9bc5cfc7f761ff562aa081968

  • SHA256

    d03171dc963ea9b515df71085f3a713ab9870a2eeacf5f0edd92c351f5f53fbe

  • SHA512

    9c9e113b73f46c9adc450aaa278ca0cd6e02e8cc873b4beedc3fb3d3024b8b11a747aad10bda913660765e8a3948acca1562544651b22de73247997e2a249693

  • SSDEEP

    3072:YD7H8XdLkXJ9pk5vKXMBK+jr0cWh7ALXYw70Kw8JXQdqr5nbrBJh8:xXdLkX/K5ycBK+kTVAsww3q59vbh

Malware Config

Extracted

Family

smokeloader

Botnet

lab

Extracted

Family

smokeloader

Version

2020

C2

http://host-file-host6.com/

http://host-host-file8.com/

rc4.i32
rc4.i32

Targets

    • Target

      d03171dc963ea9b515df71085f3a713ab9870a2eeacf5f0edd92c351f5f53fbe

    • Size

      291KB

    • MD5

      2f418c25c97b329fb8d04fce58bae98c

    • SHA1

      58975f876c072ed9bc5cfc7f761ff562aa081968

    • SHA256

      d03171dc963ea9b515df71085f3a713ab9870a2eeacf5f0edd92c351f5f53fbe

    • SHA512

      9c9e113b73f46c9adc450aaa278ca0cd6e02e8cc873b4beedc3fb3d3024b8b11a747aad10bda913660765e8a3948acca1562544651b22de73247997e2a249693

    • SSDEEP

      3072:YD7H8XdLkXJ9pk5vKXMBK+jr0cWh7ALXYw70Kw8JXQdqr5nbrBJh8:xXdLkX/K5ycBK+kTVAsww3q59vbh

MITRE ATT&CK Enterprise v6

Tasks