Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0344b09d6b71cfab34ef7f1ed878cf134ebd19268f22f76233270857b8c64ec3

  • Size

    124KB

  • Sample

    240417-qmenjaag4y

  • MD5

    ed4183bbb0be86555ac47768e096f775

  • SHA1

    dbbca82e8a46fadb0febe311351bd185942bf297

  • SHA256

    0344b09d6b71cfab34ef7f1ed878cf134ebd19268f22f76233270857b8c64ec3

  • SHA512

    accd63185205bdcaa341abfde27d4ff8ac8c68ed2fad7cdb7985d56d2ab371320eacb0562a6467ab6135b9ef59e501c0275419ae05ff99848339805ccef8ddd2

  • SSDEEP

    3072:DItI3XvRQq0XQIEzKU5tgGUcmkQoJmGQLjg5vXn5zW:sO3XvRdWZwLglPkHmb/gFXn5q

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://selebration17io.io/index.php

http://vacantion18ffeu.cc/index.php

http://valarioulinity1.net/index.php

http://buriatiarutuhuob.net/index.php

http://cassiosssionunu.me/index.php

http://sulugilioiu19.net/index.php

http://goodfooggooftool.net/index.php

rc4.i32
rc4.i32

Targets

    • Target

      c66ef4f4bed4a422bf7bcbc54628ae0d34f8bcb8385f49abde1c230f9dbc30ee.exe

    • Size

      222KB

    • MD5

      1355fb43dfd7723b915bcffed805a456

    • SHA1

      1fb37db9f02259a73c7cd630c3f2fb2f6b6ad139

    • SHA256

      c66ef4f4bed4a422bf7bcbc54628ae0d34f8bcb8385f49abde1c230f9dbc30ee

    • SHA512

      9458086f922b91332c5fae4765b7f656fdd7475854f7706a6909c4b46f8ccfadb4cffca7b9d28536f10bf09020c53967bea0cd8b10a1b9b74e57bb032e0c09cc

    • SSDEEP

      3072:Umnchpc/KlKa9B/xccOlVNPZY2EkGBdpR8YNa:UqchpkKlp9B/xccszZDhGP

MITRE ATT&CK Enterprise v15

Tasks