Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    adbe7a6a87ed8acc591a850031d9dfd8f70399a5bee4d749ebd68d120d195695

  • Size

    321KB

  • Sample

    230803-fnrz5sbc97

  • MD5

    30ff060017187bb4b3d03a131a07182b

  • SHA1

    4e3d0cace04c9de5041f5c947cacfb2ffc57cfe4

  • SHA256

    adbe7a6a87ed8acc591a850031d9dfd8f70399a5bee4d749ebd68d120d195695

  • SHA512

    23343e03f7c5752effedfb842e71ab7852de3f55267728130e67d0e8cab8f9af97d2abe4a41f0261ce6e9580e1fce1204b677f62a764b64749a856c1768e2103

  • SSDEEP

    3072:7bLJL7l1YVVVlFhjHUMeLGN/pKHojv7URsR9iFITEFDRFMWjkK9:7hh1YVVnnU/C1MOjhv8FDT

Malware Config

Extracted

Family

smokeloader

Botnet

0020

Extracted

Family

smokeloader

Version

2022

C2

https://nebraska-pizza.com/search.php

https://alaska-ships.com/search.php

rc4.i32
rc4.i32

Targets

    • Target

      adbe7a6a87ed8acc591a850031d9dfd8f70399a5bee4d749ebd68d120d195695

    • Size

      321KB

    • MD5

      30ff060017187bb4b3d03a131a07182b

    • SHA1

      4e3d0cace04c9de5041f5c947cacfb2ffc57cfe4

    • SHA256

      adbe7a6a87ed8acc591a850031d9dfd8f70399a5bee4d749ebd68d120d195695

    • SHA512

      23343e03f7c5752effedfb842e71ab7852de3f55267728130e67d0e8cab8f9af97d2abe4a41f0261ce6e9580e1fce1204b677f62a764b64749a856c1768e2103

    • SSDEEP

      3072:7bLJL7l1YVVVlFhjHUMeLGN/pKHojv7URsR9iFITEFDRFMWjkK9:7hh1YVVnnU/C1MOjhv8FDT

MITRE ATT&CK Enterprise v15

Tasks