Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    680fb6ca2c51e0cdb4ef67b5655616b3e8a4fab4bc01ab6c6a7a3420ecc97c1c

  • Size

    282KB

  • Sample

    240314-fmmzssbb5t

  • MD5

    80ac439ed5578df1e2cb3b92f6657389

  • SHA1

    fabae3db5c332925dcc5f717ba15ffee7c5c7ed9

  • SHA256

    680fb6ca2c51e0cdb4ef67b5655616b3e8a4fab4bc01ab6c6a7a3420ecc97c1c

  • SHA512

    77121c3fa5ae6cb32a148bea8620902f3ff97fca8cb03c7b07bfc910671e7cd9b287787cbed464cbda9d04df6327aa566889470fe59576b580e5352035f00fc0

  • SSDEEP

    3072:qP+7ppntxb2MJpSMI4cGHa0yFx2tK1W0zrDoehzBUu+lOafSBk8l5/:60tBDk4by/OK1Xzo2BUnTls5

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2022

C2

http://nidoe.org/tmp/index.php

http://sodez.ru/tmp/index.php

http://uama.com.ua/tmp/index.php

http://talesofpirates.net/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      680fb6ca2c51e0cdb4ef67b5655616b3e8a4fab4bc01ab6c6a7a3420ecc97c1c

    • Size

      282KB

    • MD5

      80ac439ed5578df1e2cb3b92f6657389

    • SHA1

      fabae3db5c332925dcc5f717ba15ffee7c5c7ed9

    • SHA256

      680fb6ca2c51e0cdb4ef67b5655616b3e8a4fab4bc01ab6c6a7a3420ecc97c1c

    • SHA512

      77121c3fa5ae6cb32a148bea8620902f3ff97fca8cb03c7b07bfc910671e7cd9b287787cbed464cbda9d04df6327aa566889470fe59576b580e5352035f00fc0

    • SSDEEP

      3072:qP+7ppntxb2MJpSMI4cGHa0yFx2tK1W0zrDoehzBUu+lOafSBk8l5/:60tBDk4by/OK1Xzo2BUnTls5

MITRE ATT&CK Enterprise v15

Tasks