Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    13edf447d337a3dbb3ae186d775bc4478130b134f88185120c90ab9d202d9f46

  • Size

    170KB

  • Sample

    240315-bbvs2see73

  • MD5

    0f6ea95b283cbe78863b0cae45bd4768

  • SHA1

    fc3b381d44f96d99c40dd24d5a990e2872280a18

  • SHA256

    13edf447d337a3dbb3ae186d775bc4478130b134f88185120c90ab9d202d9f46

  • SHA512

    7e9b1b7f1b19cf89010e4f73292a4a64b8d6fd7c5dc5bf6f693416e0abb63cae1a2f1244bf7882a6907232431cf41b4c3ad799d451b72c4ece21c0edb3243f2b

  • SSDEEP

    1536:c7FtxeMOhYnw7rIPXlY4fUCj1kSBoi65RYEO+uiBYXu7XyDU1faDDzqbpShl:DMOVrIlYej1kM8O+uieeeQVaDPqdSh

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2022

C2

http://nidoe.org/tmp/index.php

http://sodez.ru/tmp/index.php

http://uama.com.ua/tmp/index.php

http://talesofpirates.net/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      13edf447d337a3dbb3ae186d775bc4478130b134f88185120c90ab9d202d9f46

    • Size

      170KB

    • MD5

      0f6ea95b283cbe78863b0cae45bd4768

    • SHA1

      fc3b381d44f96d99c40dd24d5a990e2872280a18

    • SHA256

      13edf447d337a3dbb3ae186d775bc4478130b134f88185120c90ab9d202d9f46

    • SHA512

      7e9b1b7f1b19cf89010e4f73292a4a64b8d6fd7c5dc5bf6f693416e0abb63cae1a2f1244bf7882a6907232431cf41b4c3ad799d451b72c4ece21c0edb3243f2b

    • SSDEEP

      1536:c7FtxeMOhYnw7rIPXlY4fUCj1kSBoi65RYEO+uiBYXu7XyDU1faDDzqbpShl:DMOVrIlYej1kM8O+uieeeQVaDPqdSh

MITRE ATT&CK Enterprise v15

Tasks