Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9b2f39946dec7dba6fccfeb27.exe

  • Size

    271KB

  • Sample

    230630-q45w2sdb65

  • MD5

    4fb9b9fb08e3b255a76ea132cc2f987c

  • SHA1

    bc922858a1382117e5a2783cfad831a9a982aab7

  • SHA256

    9b2f39946dec7dba6fccfeb27c618cf4835dc3de05f21a7729be30f1f04187be

  • SHA512

    c6b3c77f240e2b2565a0683257aff9a42c9ff8a3626f414c02c59b54fcb0213a37e2ca54d04640fb6dee2372aef802ef2dc41b2c1e1cf85427bf675ceef7a9fd

  • SSDEEP

    3072:67hT3GL50Kv1ESjx+0m8Z9LV7l3E4Xz6dNshFlrvzyXqvD+E4PjRe/861:mT2kSjx+0mufl3E4rhFlrvoqr9oe

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Extracted

Family

smokeloader

Version

2020

C2

http://host-file-host6.com/

http://host-host-file8.com/

rc4.i32
rc4.i32

Targets

    • Target

      9b2f39946dec7dba6fccfeb27.exe

    • Size

      271KB

    • MD5

      4fb9b9fb08e3b255a76ea132cc2f987c

    • SHA1

      bc922858a1382117e5a2783cfad831a9a982aab7

    • SHA256

      9b2f39946dec7dba6fccfeb27c618cf4835dc3de05f21a7729be30f1f04187be

    • SHA512

      c6b3c77f240e2b2565a0683257aff9a42c9ff8a3626f414c02c59b54fcb0213a37e2ca54d04640fb6dee2372aef802ef2dc41b2c1e1cf85427bf675ceef7a9fd

    • SSDEEP

      3072:67hT3GL50Kv1ESjx+0m8Z9LV7l3E4Xz6dNshFlrvzyXqvD+E4PjRe/861:mT2kSjx+0mufl3E4rhFlrvoqr9oe

MITRE ATT&CK Enterprise v6

Tasks