Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bb6b1c1f612dab743ca8c5fdd3f467fda7cfb4d6d0781b51d43f411dcf8fd654
-
Size
230KB
-
Sample
231210-2k4enafec2
-
MD5
2896287af0d1f00df34eab9ec8da07d3
-
SHA1
b2f1328ae7fcb47c5a048531f720b26b609ec48a
-
SHA256
bb6b1c1f612dab743ca8c5fdd3f467fda7cfb4d6d0781b51d43f411dcf8fd654
-
SHA512
4c2f3e6d69d7b253d377fd9f544a1d31af334bd1489790a21acf7bff82edda67575de2c4d46721c96eb0822fffdf97aa9a76597263171d2eedc2c81da6fa48b3
-
SSDEEP
3072:LhRQzilEWGojQFUDWCx9yBXJjBBw1RjUoGiWHOK:ozs5hjcHCbQ5jB+fUBH
Static task
static1
Behavioral task
behavioral1
Sample
bb6b1c1f612dab743ca8c5fdd3f467fda7cfb4d6d0781b51d43f411dcf8fd654.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
bb6b1c1f612dab743ca8c5fdd3f467fda7cfb4d6d0781b51d43f411dcf8fd654.exe
Resource
win10-20231023-en
Malware Config
Extracted
smokeloader
pub1
Extracted
smokeloader
2022
http://humydrole.com/tmp/index.php
http://trunk-co.ru/tmp/index.php
http://weareelight.com/tmp/index.php
http://pirateking.online/tmp/index.php
http://piratia.pw/tmp/index.php
http://go-piratia.ru/tmp/index.php
Targets
-
-
Target
bb6b1c1f612dab743ca8c5fdd3f467fda7cfb4d6d0781b51d43f411dcf8fd654
-
Size
230KB
-
MD5
2896287af0d1f00df34eab9ec8da07d3
-
SHA1
b2f1328ae7fcb47c5a048531f720b26b609ec48a
-
SHA256
bb6b1c1f612dab743ca8c5fdd3f467fda7cfb4d6d0781b51d43f411dcf8fd654
-
SHA512
4c2f3e6d69d7b253d377fd9f544a1d31af334bd1489790a21acf7bff82edda67575de2c4d46721c96eb0822fffdf97aa9a76597263171d2eedc2c81da6fa48b3
-
SSDEEP
3072:LhRQzilEWGojQFUDWCx9yBXJjBBw1RjUoGiWHOK:ozs5hjcHCbQ5jB+fUBH
Score10/10-
Deletes itself
-
Executes dropped EXE
-