Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-22_025ea0d4c1d10fc4e33a129ca0c92844_karagany_mafia
-
Size
268KB
-
Sample
240422-kbr7lahe4y
-
MD5
025ea0d4c1d10fc4e33a129ca0c92844
-
SHA1
c014f15e861d92b4324e517d7bdbbccbe1cacb1c
-
SHA256
0c9653fcd12fdaa6c9579000af638fb99f4740744988bb7928438c29aa522318
-
SHA512
65529e2773460f923c65511cd65958cb8692728e686eade624c817507153932db6847d84e46d514bba57ffb2cfe204f0103c6ba8137339b7a7e72663e91f5067
-
SSDEEP
3072:/91QjsVE6yEmOCPT+wBNJjNvdMKEnv5yZN7nUZmfjWVoqnM4a:/9tVE4XCqYP3MN8IZmfjWWAM4a
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-22_025ea0d4c1d10fc4e33a129ca0c92844_karagany_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-22_025ea0d4c1d10fc4e33a129ca0c92844_karagany_mafia.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
smokeloader
2018
http://xrbwgb.com/gate.php
http://th5ijd5gds.xyz/gate.php
http://c82psxpjd8.top/gate.php
http://7ui3n2rezz.top/gate.php
Targets
-
-
Target
2024-04-22_025ea0d4c1d10fc4e33a129ca0c92844_karagany_mafia
-
Size
268KB
-
MD5
025ea0d4c1d10fc4e33a129ca0c92844
-
SHA1
c014f15e861d92b4324e517d7bdbbccbe1cacb1c
-
SHA256
0c9653fcd12fdaa6c9579000af638fb99f4740744988bb7928438c29aa522318
-
SHA512
65529e2773460f923c65511cd65958cb8692728e686eade624c817507153932db6847d84e46d514bba57ffb2cfe204f0103c6ba8137339b7a7e72663e91f5067
-
SSDEEP
3072:/91QjsVE6yEmOCPT+wBNJjNvdMKEnv5yZN7nUZmfjWVoqnM4a:/9tVE4XCqYP3MN8IZmfjWWAM4a
Score10/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-