Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
SecuriteInfo.com.Trojan-Ransom.StopCrypt.20113.22578.exe
-
Size
200KB
-
Sample
231114-wzwepscg88
-
MD5
63f28f4cf51df1b54f428e7802896eb8
-
SHA1
5fbb5439204697e9862787ae97836f52f92606e0
-
SHA256
d2a5bffc667647e9ba8a0d1733f9a27df01af72b9dbc7193031aad4c8853c6e4
-
SHA512
5111164b6dea908d30881ef9484f30008baf10f29195e15c4400876eb24baf30399c982f8beb403efaea973affa70884f22a4ab7affadc10dfd3f43eccb638e1
-
SSDEEP
3072:hW7BjeTrykiRvB/Kf0Lt2P3hCYTjht+X32Xb87+VFdVgc:EKqkil72ZCYTFt+n2XbtV5
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan-Ransom.StopCrypt.20113.22578.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan-Ransom.StopCrypt.20113.22578.exe
Resource
win10v2004-20231023-en
Malware Config
Extracted
smokeloader
pub4
Extracted
smokeloader
2022
http://dpav.cc/tmp/
http://lrproduct.ru/tmp/
http://kggcp.com/tmp/
http://talesofpirates.net/tmp/
http://pirateking.online/tmp/
http://piratia.pw/tmp/
http://go-piratia.ru/tmp/
Targets
-
-
Target
SecuriteInfo.com.Trojan-Ransom.StopCrypt.20113.22578.exe
-
Size
200KB
-
MD5
63f28f4cf51df1b54f428e7802896eb8
-
SHA1
5fbb5439204697e9862787ae97836f52f92606e0
-
SHA256
d2a5bffc667647e9ba8a0d1733f9a27df01af72b9dbc7193031aad4c8853c6e4
-
SHA512
5111164b6dea908d30881ef9484f30008baf10f29195e15c4400876eb24baf30399c982f8beb403efaea973affa70884f22a4ab7affadc10dfd3f43eccb638e1
-
SSDEEP
3072:hW7BjeTrykiRvB/Kf0Lt2P3hCYTjht+X32Xb87+VFdVgc:EKqkil72ZCYTFt+n2XbtV5
Score10/10-
Deletes itself
-