Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

SecuriteIn...78.exe

windows7-x64

10

SecuriteIn...78.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Trojan-Ransom.StopCrypt.20113.22578.exe

  • Size

    200KB

  • Sample

    231114-wzwepscg88

  • MD5

    63f28f4cf51df1b54f428e7802896eb8

  • SHA1

    5fbb5439204697e9862787ae97836f52f92606e0

  • SHA256

    d2a5bffc667647e9ba8a0d1733f9a27df01af72b9dbc7193031aad4c8853c6e4

  • SHA512

    5111164b6dea908d30881ef9484f30008baf10f29195e15c4400876eb24baf30399c982f8beb403efaea973affa70884f22a4ab7affadc10dfd3f43eccb638e1

  • SSDEEP

    3072:hW7BjeTrykiRvB/Kf0Lt2P3hCYTjht+X32Xb87+VFdVgc:EKqkil72ZCYTFt+n2XbtV5

Score
10/10
smokeloaderpub4backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Extracted

Family

smokeloader

Version

2022

C2

http://dpav.cc/tmp/

http://lrproduct.ru/tmp/

http://kggcp.com/tmp/

http://talesofpirates.net/tmp/

http://pirateking.online/tmp/

http://piratia.pw/tmp/

http://go-piratia.ru/tmp/
rc4.i32
rc4.i32

Targets

    • Target

      SecuriteInfo.com.Trojan-Ransom.StopCrypt.20113.22578.exe

    • Size

      200KB

    • MD5

      63f28f4cf51df1b54f428e7802896eb8

    • SHA1

      5fbb5439204697e9862787ae97836f52f92606e0

    • SHA256

      d2a5bffc667647e9ba8a0d1733f9a27df01af72b9dbc7193031aad4c8853c6e4

    • SHA512

      5111164b6dea908d30881ef9484f30008baf10f29195e15c4400876eb24baf30399c982f8beb403efaea973affa70884f22a4ab7affadc10dfd3f43eccb638e1

    • SSDEEP

      3072:hW7BjeTrykiRvB/Kf0Lt2P3hCYTjht+X32Xb87+VFdVgc:EKqkil72ZCYTFt+n2XbtV5

    Score
    10/10
    smokeloaderpub4backdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks