Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    251KB

  • Sample

    231124-hysqjahe6t

  • MD5

    bedac42746c2b83bf0b4238c72271346

  • SHA1

    cc2ed883609ffafcaa77eb4738d1b7fbdf0a0ffa

  • SHA256

    5628951705135b7582a7913c52cc3c547b50a6a9badc656351b8b7945b1d8d38

  • SHA512

    cb08cc09b1ecd5a8c226b566f404c80d2aa2c758747e0010681dd8798a5d5e3411290d2d14182871a66f3b3aa114369f6443b8e6d5819a06061c01c0b29d60c1

  • SSDEEP

    3072:HKtk4b3BOGMPMbKRzsraTsFg6KdmxaNDllCVlINC5Ru557qAo:qOKROGMPMbKurPomWhMrLChV

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Extracted

Family

smokeloader

Version

2022

C2

http://dpav.cc/tmp/

http://lrproduct.ru/tmp/

http://kggcp.com/tmp/

http://talesofpirates.net/tmp/

http://pirateking.online/tmp/

http://piratia.pw/tmp/

http://go-piratia.ru/tmp/

rc4.i32
rc4.i32

Targets

    • Target

      file.exe

    • Size

      251KB

    • MD5

      bedac42746c2b83bf0b4238c72271346

    • SHA1

      cc2ed883609ffafcaa77eb4738d1b7fbdf0a0ffa

    • SHA256

      5628951705135b7582a7913c52cc3c547b50a6a9badc656351b8b7945b1d8d38

    • SHA512

      cb08cc09b1ecd5a8c226b566f404c80d2aa2c758747e0010681dd8798a5d5e3411290d2d14182871a66f3b3aa114369f6443b8e6d5819a06061c01c0b29d60c1

    • SSDEEP

      3072:HKtk4b3BOGMPMbKRzsraTsFg6KdmxaNDllCVlINC5Ru557qAo:qOKROGMPMbKurPomWhMrLChV

MITRE ATT&CK Enterprise v15

Tasks