Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c6c8546328d6d91d3a1495875bf954e731533216df59e46bc393ce289d37e437

  • Size

    291KB

  • Sample

    230505-r663kabb38

  • MD5

    67e7ed22a07e6220b155e157d7429df0

  • SHA1

    c7cd04aa0c5164a0c4611bdb7818e032e567cc0b

  • SHA256

    c6c8546328d6d91d3a1495875bf954e731533216df59e46bc393ce289d37e437

  • SHA512

    8b6c0f6eaca57cf1ef6252d964fe86086aa3cb385e9fb57bef5708ba0d4f00588adebdea932bde04159e4ac3f26ae7a24f3afe35cfef2ed3c0677c034b958bb3

  • SSDEEP

    3072:4ETdCVIpw0puSkAXFtB/goZF+QnOewoIUhpGnhw+1E1XtsGcJBQjC2K:bkh0JXFAknOeZpcwhXWGxjC2K

Malware Config

Extracted

Family

smokeloader

Botnet

sprg

Extracted

Family

smokeloader

Version

2022

C2

http://hoh0aeghwugh2gie.com/

http://hie7doodohpae4na.com/

http://aek0aicifaloh1yo.com/

http://yic0oosaeiy7ahng.com/

http://wa5zu7sekai8xeih.com/

rc4.i32
rc4.i32

Targets

    • Target

      c6c8546328d6d91d3a1495875bf954e731533216df59e46bc393ce289d37e437

    • Size

      291KB

    • MD5

      67e7ed22a07e6220b155e157d7429df0

    • SHA1

      c7cd04aa0c5164a0c4611bdb7818e032e567cc0b

    • SHA256

      c6c8546328d6d91d3a1495875bf954e731533216df59e46bc393ce289d37e437

    • SHA512

      8b6c0f6eaca57cf1ef6252d964fe86086aa3cb385e9fb57bef5708ba0d4f00588adebdea932bde04159e4ac3f26ae7a24f3afe35cfef2ed3c0677c034b958bb3

    • SSDEEP

      3072:4ETdCVIpw0puSkAXFtB/goZF+QnOewoIUhpGnhw+1E1XtsGcJBQjC2K:bkh0JXFAknOeZpcwhXWGxjC2K

MITRE ATT&CK Enterprise v6

Tasks