Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3a0d9dcd454b86ca1c06cc5bdfef63aeda783b024e627bab64cd0483f34fe3f7.exe

  • Size

    302KB

  • Sample

    240102-s1v9jsggbr

  • MD5

    b42032268e5a3020983775ab372046aa

  • SHA1

    bdfe091c07f840231798828562e3f2ca424a6848

  • SHA256

    3a0d9dcd454b86ca1c06cc5bdfef63aeda783b024e627bab64cd0483f34fe3f7

  • SHA512

    3bfcbe1db64e0427f0afedb76730e4d499c7249936d63d41c45b363d7e6b3178f33bf72cc8c4c07da80c4e72e89f13419ef6a07148c59dec02cc6a6024414700

  • SSDEEP

    6144:CMYhIUq8LZRgGzkv8gABcwAlHjePkrBOAfgy4rU8:CnhI78btz881BnsHkkrBOKgdA

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Extracted

Family

smokeloader

Version

2022

C2

http://humydrole.com/tmp/index.php

http://trunk-co.ru/tmp/index.php

http://weareelight.com/tmp/index.php

http://pirateking.online/tmp/index.php

http://piratia.pw/tmp/index.php

http://go-piratia.ru/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      3a0d9dcd454b86ca1c06cc5bdfef63aeda783b024e627bab64cd0483f34fe3f7.exe

    • Size

      302KB

    • MD5

      b42032268e5a3020983775ab372046aa

    • SHA1

      bdfe091c07f840231798828562e3f2ca424a6848

    • SHA256

      3a0d9dcd454b86ca1c06cc5bdfef63aeda783b024e627bab64cd0483f34fe3f7

    • SHA512

      3bfcbe1db64e0427f0afedb76730e4d499c7249936d63d41c45b363d7e6b3178f33bf72cc8c4c07da80c4e72e89f13419ef6a07148c59dec02cc6a6024414700

    • SSDEEP

      6144:CMYhIUq8LZRgGzkv8gABcwAlHjePkrBOAfgy4rU8:CnhI78btz881BnsHkkrBOKgdA

MITRE ATT&CK Enterprise v15

Tasks