Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bb6b1c1f612dab743ca8c5fdd3f467fda7cfb4d6d0781b51d43f411dcf8fd654

  • Size

    230KB

  • Sample

    231210-2k4enafec2

  • MD5

    2896287af0d1f00df34eab9ec8da07d3

  • SHA1

    b2f1328ae7fcb47c5a048531f720b26b609ec48a

  • SHA256

    bb6b1c1f612dab743ca8c5fdd3f467fda7cfb4d6d0781b51d43f411dcf8fd654

  • SHA512

    4c2f3e6d69d7b253d377fd9f544a1d31af334bd1489790a21acf7bff82edda67575de2c4d46721c96eb0822fffdf97aa9a76597263171d2eedc2c81da6fa48b3

  • SSDEEP

    3072:LhRQzilEWGojQFUDWCx9yBXJjBBw1RjUoGiWHOK:ozs5hjcHCbQ5jB+fUBH

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Extracted

Family

smokeloader

Version

2022

C2

http://humydrole.com/tmp/index.php

http://trunk-co.ru/tmp/index.php

http://weareelight.com/tmp/index.php

http://pirateking.online/tmp/index.php

http://piratia.pw/tmp/index.php

http://go-piratia.ru/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      bb6b1c1f612dab743ca8c5fdd3f467fda7cfb4d6d0781b51d43f411dcf8fd654

    • Size

      230KB

    • MD5

      2896287af0d1f00df34eab9ec8da07d3

    • SHA1

      b2f1328ae7fcb47c5a048531f720b26b609ec48a

    • SHA256

      bb6b1c1f612dab743ca8c5fdd3f467fda7cfb4d6d0781b51d43f411dcf8fd654

    • SHA512

      4c2f3e6d69d7b253d377fd9f544a1d31af334bd1489790a21acf7bff82edda67575de2c4d46721c96eb0822fffdf97aa9a76597263171d2eedc2c81da6fa48b3

    • SSDEEP

      3072:LhRQzilEWGojQFUDWCx9yBXJjBBw1RjUoGiWHOK:ozs5hjcHCbQ5jB+fUBH

MITRE ATT&CK Enterprise v15

Tasks