Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    36013.exe

  • Size

    282KB

  • Sample

    230524-lw7y8abh27

  • MD5

    5655b60fb54c18c845062db99282b570

  • SHA1

    7ab89be275ca7cfa5198d41a96bd0b48f0e2a01e

  • SHA256

    b18947d9e68e83133eda85583d8e99e4a7492b6b74a8fa65fb31e6c2d5b02647

  • SHA512

    07920a24b755182d0192339177c2262efc4f3b088ea16465cbcf6256251cde2b6b95d54eca6ec93417f07548f603115ff9f363e826121f01a17056713a5eda1f

  • SSDEEP

    3072:1fxLyGo+oXlHpNwVWGlcfr0fzU3G2ZtZTeYNQ910QQiLg7HqfHoFJFkXedK:veGRo3J9oU22Zn7Q7TrBQFkH

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://potunulit.org/

http://hutnilior.net/

http://bulimu55t.net/

http://soryytlic4.net/

http://novanosa5org.org/

http://nuljjjnuli.org/

http://tolilolihul.net/

http://somatoka51hub.net/

http://hujukui3.net/

http://bukubuka1.net/

http://golilopaster.org/

http://newzelannd66.org/

http://otriluyttn.org/

rc4.i32
rc4.i32

Targets

    • Target

      36013.exe

    • Size

      282KB

    • MD5

      5655b60fb54c18c845062db99282b570

    • SHA1

      7ab89be275ca7cfa5198d41a96bd0b48f0e2a01e

    • SHA256

      b18947d9e68e83133eda85583d8e99e4a7492b6b74a8fa65fb31e6c2d5b02647

    • SHA512

      07920a24b755182d0192339177c2262efc4f3b088ea16465cbcf6256251cde2b6b95d54eca6ec93417f07548f603115ff9f363e826121f01a17056713a5eda1f

    • SSDEEP

      3072:1fxLyGo+oXlHpNwVWGlcfr0fzU3G2ZtZTeYNQ910QQiLg7HqfHoFJFkXedK:veGRo3J9oU22Zn7Q7TrBQFkH

MITRE ATT&CK Enterprise v6

Tasks