Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x0006000000023234-4438.dat

  • Size

    38KB

  • Sample

    231211-myxfyadhh9

  • MD5

    e53b4a22267e4b02fc34df480c20e4d4

  • SHA1

    e9a09befeb2cc6a3a118e9c4f4e88a7175b9a527

  • SHA256

    92e52d4a2fcf95b0dd487e49bacfac77ad241f4744f2c6edf670686553c3dec2

  • SHA512

    7ca80daab43a054403281a75a59cd37d1daa3f0bcb68a9341ef62aabe560f8a20eb62cd6e6d1c7014abd95dfade4bbffad1928a6db7e0024f187914e65265f86

  • SSDEEP

    768:d8n3N4JRqwg8UTB+8zx70f0PSuopLwlFFWO7:dmN4JRrg8ypxSKFFX

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://81.19.131.34/fks/index.php

rc4.i32
rc4.i32

Extracted

Family

redline

Botnet

LiveTraffic

C2

77.105.132.87:6731

Extracted

Family

redline

Botnet

@oleh_ps

C2

176.123.7.190:32927

Extracted

Family

smokeloader

Botnet

up3

Extracted

Family

smokeloader

Version

2020

C2

http://host-file-host6.com/

http://host-host-file8.com/

rc4.i32
rc4.i32

Extracted

Family

redline

Botnet

55000

C2

38.47.221.193:34368

Targets

MITRE ATT&CK Enterprise v15

Tasks