Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b3458d317bb1d899de66eb3f3a50eeeaa1b8d2c7f4bd8e425a60d3fec697f3eb_JC.exe

  • Size

    244KB

  • Sample

    230930-qkbtvsce7y

  • MD5

    0d8502fef5dd261f308d66febb9cb48b

  • SHA1

    ce56b101459bc1abeda37dcd75bc574cb78402af

  • SHA256

    b3458d317bb1d899de66eb3f3a50eeeaa1b8d2c7f4bd8e425a60d3fec697f3eb

  • SHA512

    4bf6669f91a3a5115165de938452bb1aa1203f51d94885d585ab56891d2a11e1d92e532663691012d218557acec4a4d0c91ee9b9b09fc466aff0aacd137771e0

  • SSDEEP

    3072:6XjRI3MLxNy1MtOFMzmxyh3NzNgLGUIqsynbfzQIB5J5mJxrYT:addjyGtOFQzNgyUx7bfzQIB0nrYT

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Extracted

Family

smokeloader

Version

2022

C2

http://gudintas.at/tmp/

http://pik96.ru/tmp/

http://rosatiauto.com/tmp/

http://kingpirate.ru/tmp/

rc4.i32
rc4.i32

Targets

    • Target

      b3458d317bb1d899de66eb3f3a50eeeaa1b8d2c7f4bd8e425a60d3fec697f3eb_JC.exe

    • Size

      244KB

    • MD5

      0d8502fef5dd261f308d66febb9cb48b

    • SHA1

      ce56b101459bc1abeda37dcd75bc574cb78402af

    • SHA256

      b3458d317bb1d899de66eb3f3a50eeeaa1b8d2c7f4bd8e425a60d3fec697f3eb

    • SHA512

      4bf6669f91a3a5115165de938452bb1aa1203f51d94885d585ab56891d2a11e1d92e532663691012d218557acec4a4d0c91ee9b9b09fc466aff0aacd137771e0

    • SSDEEP

      3072:6XjRI3MLxNy1MtOFMzmxyh3NzNgLGUIqsynbfzQIB5J5mJxrYT:addjyGtOFQzNgyUx7bfzQIB0nrYT

MITRE ATT&CK Enterprise v15

Tasks