Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

30f0d6e1a7...45.exe

windows7-x64

10

30f0d6e1a7...45.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    13s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    20/08/2024, 01:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    30f0d6e1a730d2f350d921013df99deced8810b8506a004d97734ff4c1a8ab45.exe

  • Size

    216KB

  • MD5

    18dbe9f4f27dc46f7fb7c06643c47167

  • SHA1

    eaa5b4b36fb9a92b17186ae954d0b61ea1a8bc68

  • SHA256

    30f0d6e1a730d2f350d921013df99deced8810b8506a004d97734ff4c1a8ab45

  • SHA512

    9c84ff20ee18097385e18679a29e51fc18144f9a6c543e668fb6ecd5176c3fc52392c9a0b964648cec78174248337ca60a6da2615b4666d0eceda4cb440bae41

  • SSDEEP

    3072:jOKL7HwvSFX7DB3dLesCC8H5vX8vnhhRN085HhpH1:nLTwvSFLD1dL9CC8H5XQhhR

Score
10/10
smokeloaderpub2backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\30f0d6e1a730d2f350d921013df99deced8810b8506a004d97734ff4c1a8ab45.exe
    "C:\Users\Admin\AppData\Local\Temp\30f0d6e1a730d2f350d921013df99deced8810b8506a004d97734ff4c1a8ab45.exe"
    1⤵
      PID:2472

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2472-1-0x00000000004F0000-0x00000000005F0000-memory.dmp

      Filesize

      1024KB

      Download

    • memory/2472-3-0x0000000000400000-0x0000000000449000-memory.dmp

      Filesize

      292KB

      Download

    • memory/2472-2-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB

      Download