Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6d622a7bd71b3d9fc58e121ed184bd2323dd8e38b60f79fbe260a4bf842f847a

  • Size

    347KB

  • Sample

    230416-chvbjage83

  • MD5

    218fd755fc98aa60b8e5f52ecb73c914

  • SHA1

    32f98788c7d64f0169dcb9d3fcfc5539f0a6b6d5

  • SHA256

    6d622a7bd71b3d9fc58e121ed184bd2323dd8e38b60f79fbe260a4bf842f847a

  • SHA512

    525b73ddb5e6d203337ebefce7c059d97955e3e08c76c0d43233dfa84dade0a89ef1d4edda13ba43a5519148e8d5864a228e59f21d5ad2a879535b78d6ec7223

  • SSDEEP

    6144:BfCqdA2EXYn8BKEyET6TPVkaGAgABXZbbe4:Bf7dZln8BKEdTq9RgAZZbq4

Malware Config

Extracted

Family

smokeloader

Botnet

pu10

Extracted

Family

smokeloader

Version

2020

C2

http://host-file-host6.com/

http://host-host-file8.com/

rc4.i32
rc4.i32

Targets

    • Target

      6d622a7bd71b3d9fc58e121ed184bd2323dd8e38b60f79fbe260a4bf842f847a

    • Size

      347KB

    • MD5

      218fd755fc98aa60b8e5f52ecb73c914

    • SHA1

      32f98788c7d64f0169dcb9d3fcfc5539f0a6b6d5

    • SHA256

      6d622a7bd71b3d9fc58e121ed184bd2323dd8e38b60f79fbe260a4bf842f847a

    • SHA512

      525b73ddb5e6d203337ebefce7c059d97955e3e08c76c0d43233dfa84dade0a89ef1d4edda13ba43a5519148e8d5864a228e59f21d5ad2a879535b78d6ec7223

    • SSDEEP

      6144:BfCqdA2EXYn8BKEyET6TPVkaGAgABXZbbe4:Bf7dZln8BKEdTq9RgAZZbq4

MITRE ATT&CK Enterprise v6

Tasks