Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9291bca826cef1aea38b5ef29194b4a7.exe

  • Size

    246KB

  • Sample

    231011-f2wkgsdg42

  • MD5

    9291bca826cef1aea38b5ef29194b4a7

  • SHA1

    be86f884b0f532736baffbf01ad501c5eb563c64

  • SHA256

    a4a72aa6e13e8a2a2dcafc11b4ffe3cd1ac26ea18d6ff09d29a8943eea7a2c56

  • SHA512

    9cdc217bc6523285e40abfebe9987702cc15d0866ad65f0084269048825b3051cabcf505c2561024148e26709e28fb79acdfbad52cc4c6eb56f1b1deb94f5649

  • SSDEEP

    6144:JRDz4SHy5uoBMFGV5PEkIXEHvZAO7MpBWVs0BC+:ACmuoBMUOMxhs0BC+

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://77.91.68.29/fks/

rc4.i32
rc4.i32

Extracted

Family

amadey

Version

3.89

C2

http://77.91.124.1/theme/index.php

Attributes
  • install_dir

    fefffe8cea

  • install_file

    explothe.exe

  • strings_key

    36a96139c1118a354edf72b1080d4b2f

rc4.plain

Extracted

Family

redline

Botnet

6012068394_99

C2

https://pastebin.com/raw/8baCJyMF

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Extracted

Family

redline

Botnet

pixelscloud

C2

85.209.176.171:80

Extracted

Family

redline

Botnet

breha

C2

77.91.124.55:19071

Extracted

Family

smokeloader

Botnet

up3

Extracted

Family

smokeloader

Version

2020

C2

http://host-file-host6.com/

http://host-host-file8.com/

rc4.i32
rc4.i32

Targets

MITRE ATT&CK Enterprise v15

Tasks