Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0a43bc29b96992aaec01af4c1a83318e1db149f8d8f216425c371b3a1400bf8e

  • Size

    261KB

  • Sample

    230830-kev3nadg5z

  • MD5

    759c7436e814bf2725ff42e2bc284f3c

  • SHA1

    1c5d90940e6d4983876666b03e469ceb1aa32bb0

  • SHA256

    0a43bc29b96992aaec01af4c1a83318e1db149f8d8f216425c371b3a1400bf8e

  • SHA512

    22df8fd0ca5495a7e3e2d6aae9d779407243b9afea0236230464818ceac20a2d8b468f2460a0f937e06961e313ddd45acc931756e52d069efc59e03171baf28e

  • SSDEEP

    3072:EX0yl9VVmPf+lL/BJIBSnZD5WA1tifUdAEqe7LscTZ/vEviFBhw4o:aHT8+ZJJIBSZDh1t/CcTZ/vEwF

Malware Config

Extracted

Family

smokeloader

Botnet

up3

Extracted

Family

smokeloader

Version

2020

C2

http://host-file-host6.com/

http://host-host-file8.com/

rc4.i32
rc4.i32

Targets

    • Target

      0a43bc29b96992aaec01af4c1a83318e1db149f8d8f216425c371b3a1400bf8e

    • Size

      261KB

    • MD5

      759c7436e814bf2725ff42e2bc284f3c

    • SHA1

      1c5d90940e6d4983876666b03e469ceb1aa32bb0

    • SHA256

      0a43bc29b96992aaec01af4c1a83318e1db149f8d8f216425c371b3a1400bf8e

    • SHA512

      22df8fd0ca5495a7e3e2d6aae9d779407243b9afea0236230464818ceac20a2d8b468f2460a0f937e06961e313ddd45acc931756e52d069efc59e03171baf28e

    • SSDEEP

      3072:EX0yl9VVmPf+lL/BJIBSnZD5WA1tifUdAEqe7LscTZ/vEviFBhw4o:aHT8+ZJJIBSZDh1t/CcTZ/vEwF

MITRE ATT&CK Matrix

Tasks