Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e948d819098a535a287e480031682ef52dfd0a3b4d53778b49d73f362409c8aa
-
Size
250KB
-
Sample
230331-hn3gzsac2v
-
MD5
9940c2ab467873062bae14960469b7dd
-
SHA1
8a253e9de5d2daa699f0d7e0673d2f6dc480b4a0
-
SHA256
e948d819098a535a287e480031682ef52dfd0a3b4d53778b49d73f362409c8aa
-
SHA512
2ad6a4a99c7b05212e64c843027f946cd59ee26f02cc1b0e4655d9ecf88b7de70ffe9557291cbedd6d2a4f90b5e830e7ad91d4758aaf80128ee243930c66b6b9
-
SSDEEP
3072:wGA/Fn5TF+pt8XcfsRmXBOXRMN2iYWdrZr8Cr/+Sl73Mq4KvKKKFpxwH+v:whB5T0Acfmh6fYjK//3MfKKee
Static task
static1
Behavioral task
behavioral1
Sample
e948d819098a535a287e480031682ef52dfd0a3b4d53778b49d73f362409c8aa.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
smokeloader
lab
Extracted
smokeloader
2020
http://host-file-host6.com/
http://host-host-file8.com/
Targets
-
-
Target
e948d819098a535a287e480031682ef52dfd0a3b4d53778b49d73f362409c8aa
-
Size
250KB
-
MD5
9940c2ab467873062bae14960469b7dd
-
SHA1
8a253e9de5d2daa699f0d7e0673d2f6dc480b4a0
-
SHA256
e948d819098a535a287e480031682ef52dfd0a3b4d53778b49d73f362409c8aa
-
SHA512
2ad6a4a99c7b05212e64c843027f946cd59ee26f02cc1b0e4655d9ecf88b7de70ffe9557291cbedd6d2a4f90b5e830e7ad91d4758aaf80128ee243930c66b6b9
-
SSDEEP
3072:wGA/Fn5TF+pt8XcfsRmXBOXRMN2iYWdrZr8Cr/+Sl73Mq4KvKKKFpxwH+v:whB5T0Acfmh6fYjK//3MfKKee
Score10/10-
Suspicious use of SetThreadContext
-