Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b161842fb55681498c8f03903030df175c4bd3a1ad069a55ede445ffc7c67b5c
-
Size
289KB
-
Sample
230921-qcjjqsab34
-
MD5
aad5aad479fafec3a9477e38af7c472e
-
SHA1
5cfcafe95196c4204646d2fce091729946421b89
-
SHA256
b161842fb55681498c8f03903030df175c4bd3a1ad069a55ede445ffc7c67b5c
-
SHA512
1a7029423a2e36d2502155b388dc6186e5455b37864fe8c07000dc5ec6e6f0a6ad65e5b27eb41f0a9beccd3d69ec944bf411fcfc9f7133e577d1470d7e8ceade
-
SSDEEP
3072:gxXrZTSJe6Aqx6ThdhVJu9cNIkyasojimMabwG6id7Rg8/ve:MrpSxN6Thdxu9cNfsoWmRbP6ifg8X
Static task
static1
Behavioral task
behavioral1
Sample
b161842fb55681498c8f03903030df175c4bd3a1ad069a55ede445ffc7c67b5c.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
smokeloader
up4
Extracted
smokeloader
2020
http://host-file-file0.com/
http://file-file-file1.com/
Targets
-
-
Target
b161842fb55681498c8f03903030df175c4bd3a1ad069a55ede445ffc7c67b5c
-
Size
289KB
-
MD5
aad5aad479fafec3a9477e38af7c472e
-
SHA1
5cfcafe95196c4204646d2fce091729946421b89
-
SHA256
b161842fb55681498c8f03903030df175c4bd3a1ad069a55ede445ffc7c67b5c
-
SHA512
1a7029423a2e36d2502155b388dc6186e5455b37864fe8c07000dc5ec6e6f0a6ad65e5b27eb41f0a9beccd3d69ec944bf411fcfc9f7133e577d1470d7e8ceade
-
SSDEEP
3072:gxXrZTSJe6Aqx6ThdhVJu9cNIkyasojimMabwG6id7Rg8/ve:MrpSxN6Thdxu9cNfsoWmRbP6ifg8X
Score10/10-
Modifies Installed Components in the registry
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetThreadContext
-