Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d1ddf29cb7b488e031823aae035cba9254b80d3fd2d0327a01e0e297646170d3
-
Size
223KB
-
Sample
230819-t7pwsada4x
-
MD5
067b1fdd153eef8fe783bb82763204f4
-
SHA1
fb8e205517e8a2e5a7fe4b3bdad1f67f7c6b7755
-
SHA256
d1ddf29cb7b488e031823aae035cba9254b80d3fd2d0327a01e0e297646170d3
-
SHA512
d92fe694806ecb3b72fc64ed6904741dd084650629e158ffc4390f40b00c6b062b40c272db8bac94cf495b45f7f5639974669d818f1d4ce282fd91cf3131868c
-
SSDEEP
3072:AohXtZY3NutLzLLxChRdN/yf0b/NHhAiUGu15pFBhJK7znxUq+pwlhTbJfABH/:7hXwN+LtC/yglHh8GKnh22ETb2Bf
Static task
static1
Behavioral task
behavioral1
Sample
d1ddf29cb7b488e031823aae035cba9254b80d3fd2d0327a01e0e297646170d3.exe
Resource
win10-20230703-en
Malware Config
Extracted
smokeloader
pub1
Extracted
smokeloader
2020
http://host-file-host6.com/
http://host-host-file8.com/
Targets
-
-
Target
d1ddf29cb7b488e031823aae035cba9254b80d3fd2d0327a01e0e297646170d3
-
Size
223KB
-
MD5
067b1fdd153eef8fe783bb82763204f4
-
SHA1
fb8e205517e8a2e5a7fe4b3bdad1f67f7c6b7755
-
SHA256
d1ddf29cb7b488e031823aae035cba9254b80d3fd2d0327a01e0e297646170d3
-
SHA512
d92fe694806ecb3b72fc64ed6904741dd084650629e158ffc4390f40b00c6b062b40c272db8bac94cf495b45f7f5639974669d818f1d4ce282fd91cf3131868c
-
SSDEEP
3072:AohXtZY3NutLzLLxChRdN/yf0b/NHhAiUGu15pFBhJK7znxUq+pwlhTbJfABH/:7hXwN+LtC/yglHh8GKnh22ETb2Bf
Score10/10-
Deletes itself
-
Suspicious use of SetThreadContext
-