Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
654b379331d2cc678426426a8ed04f44d99d88299f4f0ab7f2c87fbdbe26f9bf
-
Size
297KB
-
Sample
231011-h5ykcsbe29
-
MD5
14c384f7af66b85140c828e15aa878b9
-
SHA1
78cd54f6e69613f7846f56242fe9f70251012f51
-
SHA256
654b379331d2cc678426426a8ed04f44d99d88299f4f0ab7f2c87fbdbe26f9bf
-
SHA512
420dc6822f2eeb5a3e97e08eb41c073f474e1f86de625cc88fa2994ba3923b3a20d2ee506669906f1de3a6a21b9ac71562b5a412cadb3aaa5e0e5c2b1d005b2d
-
SSDEEP
3072:iF/DBoAFD07fW6twdAwPlbeE3SHJbB8Z26fF8IgcbDsIxw:M/D1FI7fWgwdAwNbeLH5B8Pvdk
Static task
static1
Behavioral task
behavioral1
Sample
654b379331d2cc678426426a8ed04f44d99d88299f4f0ab7f2c87fbdbe26f9bf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
654b379331d2cc678426426a8ed04f44d99d88299f4f0ab7f2c87fbdbe26f9bf.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
smokeloader
2022
http://potunulit.org/
http://hutnilior.net/
http://bulimu55t.net/
http://soryytlic4.net/
http://novanosa5org.org/
http://nuljjjnuli.org/
http://tolilolihul.net/
http://somatoka51hub.net/
http://hujukui3.net/
http://bukubuka1.net/
http://golilopaster.org/
http://newzelannd66.org/
http://otriluyttn.org/
Targets
-
-
Target
654b379331d2cc678426426a8ed04f44d99d88299f4f0ab7f2c87fbdbe26f9bf
-
Size
297KB
-
MD5
14c384f7af66b85140c828e15aa878b9
-
SHA1
78cd54f6e69613f7846f56242fe9f70251012f51
-
SHA256
654b379331d2cc678426426a8ed04f44d99d88299f4f0ab7f2c87fbdbe26f9bf
-
SHA512
420dc6822f2eeb5a3e97e08eb41c073f474e1f86de625cc88fa2994ba3923b3a20d2ee506669906f1de3a6a21b9ac71562b5a412cadb3aaa5e0e5c2b1d005b2d
-
SSDEEP
3072:iF/DBoAFD07fW6twdAwPlbeE3SHJbB8Z26fF8IgcbDsIxw:M/D1FI7fWgwdAwNbeLH5B8Pvdk
Score10/10-
Deletes itself
-
Executes dropped EXE
-