Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

fb35fbb6b4...f2.exe

windows7-x64

10

fb35fbb6b4...f2.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    20/08/2024, 02:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fb35fbb6b4e4c9bbbc67e71aa2313e3446a70fcba7a60c26553d4e530f94bdf2.exe

  • Size

    199KB

  • MD5

    a77fafcd026cba6d7ee5ea7e504684d8

  • SHA1

    5e77807eadd64328d37a716b7bcb37c03733fea5

  • SHA256

    fb35fbb6b4e4c9bbbc67e71aa2313e3446a70fcba7a60c26553d4e530f94bdf2

  • SHA512

    2bd821416afb283710464b5629653aae96a0c4244da42d1f19c50de9c609ddcb42cd6d9c4be8c20376a6c20c89f37c6c6c315bdcff8be30d0bdd880217c0eec3

  • SSDEEP

    1536:ExCpc9qVLC4XAzWJvwP6OTJcqiCaiz4KB/D2Vb9GQrn+C0lBFY5oIjuEVFH:XBLRHjE+qmizlB/D2Vb9Gq+C+B25ovM

Score
10/10
smokeloaderpub1backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\fb35fbb6b4e4c9bbbc67e71aa2313e3446a70fcba7a60c26553d4e530f94bdf2.exe
    "C:\Users\Admin\AppData\Local\Temp\fb35fbb6b4e4c9bbbc67e71aa2313e3446a70fcba7a60c26553d4e530f94bdf2.exe"
    1⤵
      PID:2980

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2980-4-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB

      Download

    • memory/2980-3-0x0000000000220000-0x000000000022B000-memory.dmp

      Filesize

      44KB

      Download

    • memory/2980-2-0x0000000000590000-0x0000000000690000-memory.dmp

      Filesize

      1024KB

      Download

    • memory/2980-1-0x0000000000400000-0x0000000000446000-memory.dmp

      Filesize

      280KB

      Download