Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    63a5e84b501aaac71123e94bff15fe2a92951fb0f785036f65dcca8e12b0f71f

  • Size

    183KB

  • Sample

    231113-j3gz9sbh27

  • MD5

    eb0b907c5a0da6ae70e55a4d81467bfe

  • SHA1

    b27de6f96d3ce6aa76b9068cbb82385c80f0c6c8

  • SHA256

    63a5e84b501aaac71123e94bff15fe2a92951fb0f785036f65dcca8e12b0f71f

  • SHA512

    af5c620f1143893fee09786469d1890ab385cebbeb6e515ed37846d7047532b61d041f505b00339f4a3a93003c2e392eb2637d084b113a50263b67198099d04f

  • SSDEEP

    3072:JmGCAvGT6jm4ozQwfNbeXPltjT1KS2WPyK2x7KS:JtC5OaBzPGbQXWy

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Extracted

Family

smokeloader

Version

2022

C2

http://dpav.cc/tmp/

http://lrproduct.ru/tmp/

http://kggcp.com/tmp/

http://talesofpirates.net/tmp/

http://pirateking.online/tmp/

http://piratia.pw/tmp/

http://go-piratia.ru/tmp/

rc4.i32
rc4.i32

Targets

    • Target

      63a5e84b501aaac71123e94bff15fe2a92951fb0f785036f65dcca8e12b0f71f

    • Size

      183KB

    • MD5

      eb0b907c5a0da6ae70e55a4d81467bfe

    • SHA1

      b27de6f96d3ce6aa76b9068cbb82385c80f0c6c8

    • SHA256

      63a5e84b501aaac71123e94bff15fe2a92951fb0f785036f65dcca8e12b0f71f

    • SHA512

      af5c620f1143893fee09786469d1890ab385cebbeb6e515ed37846d7047532b61d041f505b00339f4a3a93003c2e392eb2637d084b113a50263b67198099d04f

    • SSDEEP

      3072:JmGCAvGT6jm4ozQwfNbeXPltjT1KS2WPyK2x7KS:JtC5OaBzPGbQXWy

MITRE ATT&CK Enterprise v15

Tasks