Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e158171cee1cd932a42f0fc480644b6098e541108f0dab559d2b161a5daba63c

  • Size

    310KB

  • Sample

    240530-3lp44aed8v

  • MD5

    97af264b0ce4bd245e4dafa6f35ed4d6

  • SHA1

    f32bd043b7e2d01a08427b698173980d51bfe868

  • SHA256

    e158171cee1cd932a42f0fc480644b6098e541108f0dab559d2b161a5daba63c

  • SHA512

    f418a669cfcc2ef7726a8cec476fc2b65bea1798c5f53969bc41fad9f3b2257d8c04c9bcd0b48e3a3cb82cfb829bb7d44ad26f7436b98dfb37bb83a25eea26a4

  • SSDEEP

    3072:3HE/gFvnijR1ewzAzUSf+qC/nJtdMr5Io49fb+Qg1pgce1yR2tZz+mbNP+zeqo3O:3nFvi11e2utfsMrniN9ce1yUZTb+el

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Extracted

Family

smokeloader

Version

2022

C2

http://dbfhns.in/tmp/index.php

http://guteyr.cc/tmp/index.php

http://greendag.ru/tmp/index.php

http://lobulraualov.in.net/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target

      e158171cee1cd932a42f0fc480644b6098e541108f0dab559d2b161a5daba63c

    • Size

      310KB

    • MD5

      97af264b0ce4bd245e4dafa6f35ed4d6

    • SHA1

      f32bd043b7e2d01a08427b698173980d51bfe868

    • SHA256

      e158171cee1cd932a42f0fc480644b6098e541108f0dab559d2b161a5daba63c

    • SHA512

      f418a669cfcc2ef7726a8cec476fc2b65bea1798c5f53969bc41fad9f3b2257d8c04c9bcd0b48e3a3cb82cfb829bb7d44ad26f7436b98dfb37bb83a25eea26a4

    • SSDEEP

      3072:3HE/gFvnijR1ewzAzUSf+qC/nJtdMr5Io49fb+Qg1pgce1yR2tZz+mbNP+zeqo3O:3nFvi11e2utfsMrniN9ce1yUZTb+el

MITRE ATT&CK Enterprise v15

Tasks