Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2fe372b10b4da5eeaf09d22197be5ca8c9115e7a9a031abd60f3615e789fc72c

  • Size

    33KB

  • Sample

    231103-el8z7sbg7z

  • MD5

    65bfa08856a98a69a16a520b03e8d6a0

  • SHA1

    a50eb214ff01b9a7dcadeb0c7ba6d4bca94fc1ad

  • SHA256

    2fe372b10b4da5eeaf09d22197be5ca8c9115e7a9a031abd60f3615e789fc72c

  • SHA512

    8c2a49b70ec615d9959a646286e4396dc76141b2ee12cb8f77c372b45c8ad0f29ca2c1a81128389c9ac78e3fbb05e215e9eb7150fdc49ed36a1135e1af0876c8

  • SSDEEP

    768:4Oop0VePArh/XRsb0IDBXBmDjJOimTjr9Yo5rm/EmUEfx:siePAV/hXIDepjmTjrNif

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://yvzgz.cyou/index.php

https://yvzgz.cyou/index.php

rc4.i32
rc4.i32

Targets

    • Target

      2fe372b10b4da5eeaf09d22197be5ca8c9115e7a9a031abd60f3615e789fc72c

    • Size

      33KB

    • MD5

      65bfa08856a98a69a16a520b03e8d6a0

    • SHA1

      a50eb214ff01b9a7dcadeb0c7ba6d4bca94fc1ad

    • SHA256

      2fe372b10b4da5eeaf09d22197be5ca8c9115e7a9a031abd60f3615e789fc72c

    • SHA512

      8c2a49b70ec615d9959a646286e4396dc76141b2ee12cb8f77c372b45c8ad0f29ca2c1a81128389c9ac78e3fbb05e215e9eb7150fdc49ed36a1135e1af0876c8

    • SSDEEP

      768:4Oop0VePArh/XRsb0IDBXBmDjJOimTjr9Yo5rm/EmUEfx:siePAV/hXIDepjmTjrNif

MITRE ATT&CK Enterprise v15

Tasks