Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    443e1e5425fa68b2ed3624ff027cb70c47076ba48edb2b51d0a4ff11d69509de

  • Size

    251KB

  • Sample

    231105-19y1ssdf2z

  • MD5

    007d688a89d9dad8f57dfa8b3b5e27e0

  • SHA1

    2f17ec3490e79abbe28da77e6d954c21b786a1c8

  • SHA256

    443e1e5425fa68b2ed3624ff027cb70c47076ba48edb2b51d0a4ff11d69509de

  • SHA512

    7f12cc8b2eeb63c6fa4218dcd155d7a934317bd13ca3a68db06cfaecc014701540585c11407c251322136ebec84eb8a39ce3b799a2d9d8c3c523fce1baebbfff

  • SSDEEP

    3072:5VoP9wuknKQ5pXjjz3+mWmUji+SpDZO2033wr8hme3JUdry/Ocat:LoyuzQ/T3+7mh+S5ZO2O3wIhT2wG

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Extracted

Family

smokeloader

Version

2022

C2

http://dpav.cc/tmp/

http://lrproduct.ru/tmp/

http://kggcp.com/tmp/

http://talesofpirates.net/tmp/

http://pirateking.online/tmp/

http://piratia.pw/tmp/

http://go-piratia.ru/tmp/

rc4.i32
rc4.i32

Targets

    • Target

      443e1e5425fa68b2ed3624ff027cb70c47076ba48edb2b51d0a4ff11d69509de

    • Size

      251KB

    • MD5

      007d688a89d9dad8f57dfa8b3b5e27e0

    • SHA1

      2f17ec3490e79abbe28da77e6d954c21b786a1c8

    • SHA256

      443e1e5425fa68b2ed3624ff027cb70c47076ba48edb2b51d0a4ff11d69509de

    • SHA512

      7f12cc8b2eeb63c6fa4218dcd155d7a934317bd13ca3a68db06cfaecc014701540585c11407c251322136ebec84eb8a39ce3b799a2d9d8c3c523fce1baebbfff

    • SSDEEP

      3072:5VoP9wuknKQ5pXjjz3+mWmUji+SpDZO2033wr8hme3JUdry/Ocat:LoyuzQ/T3+7mh+S5ZO2O3wIhT2wG

MITRE ATT&CK Enterprise v15

Tasks