Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f9492678fcf63273c3b6750445e307101b9cae1f968a72faa5b6f4de977913ef
-
Size
231KB
-
Sample
231121-b6qsksca9s
-
MD5
fd4b61276668c94ed75a1054cd475e35
-
SHA1
290a8419d5faf0caa9bedf1b98d408678f91ceb0
-
SHA256
f9492678fcf63273c3b6750445e307101b9cae1f968a72faa5b6f4de977913ef
-
SHA512
127d2c89a4c6ec741d605bf22709087033c335d5a998a308dea66a8a883aefbac078c3da508b35ec5cae10e632ab6fd7c96b13b1b4adb5cf961ce2f72cd5c306
-
SSDEEP
3072:FDX75tXkud8zD/ebO+ksSbdhOKroPfM3/cj/SKmcjBQOmZR1p:Fb75OumzDetksSbnORu/6McVQFR
Static task
static1
Behavioral task
behavioral1
Sample
f9492678fcf63273c3b6750445e307101b9cae1f968a72faa5b6f4de977913ef.exe
Resource
win10-20231023-en
Malware Config
Extracted
smokeloader
up4
Extracted
smokeloader
2020
http://host-file-file0.com/
http://file-file-file1.com/
Targets
-
-
Target
f9492678fcf63273c3b6750445e307101b9cae1f968a72faa5b6f4de977913ef
-
Size
231KB
-
MD5
fd4b61276668c94ed75a1054cd475e35
-
SHA1
290a8419d5faf0caa9bedf1b98d408678f91ceb0
-
SHA256
f9492678fcf63273c3b6750445e307101b9cae1f968a72faa5b6f4de977913ef
-
SHA512
127d2c89a4c6ec741d605bf22709087033c335d5a998a308dea66a8a883aefbac078c3da508b35ec5cae10e632ab6fd7c96b13b1b4adb5cf961ce2f72cd5c306
-
SSDEEP
3072:FDX75tXkud8zD/ebO+ksSbdhOKroPfM3/cj/SKmcjBQOmZR1p:Fb75OumzDetksSbnORu/6McVQFR
Score10/10-
Modifies Installed Components in the registry
-
Deletes itself
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetThreadContext
-