Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    16s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    21/08/2024, 10:56

General

  • Target

    b200c59bc7f54a014553ca0820eedeb97c58319889029257d6a01e680300752a.exe

  • Size

    215KB

  • MD5

    c51ee98ac8dedda294d4221429b387cc

  • SHA1

    6a1bbf9e196bafece0c40e98b7f9939a455d6fb1

  • SHA256

    b200c59bc7f54a014553ca0820eedeb97c58319889029257d6a01e680300752a

  • SHA512

    fbaece84b683283f81ccbb3f09f8deb83b8a82b7a69df88cc5d1f693382e305e5960c3337da1f1327420867fb7de18f0211eb5ee6641e5014bab66d975747be1

  • SSDEEP

    3072:TBuLzisNmS2CyeuBJ1djeBU2ZE0lTph6R5JV:oLzisD2C6ReBJZ1j2

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\b200c59bc7f54a014553ca0820eedeb97c58319889029257d6a01e680300752a.exe
    "C:\Users\Admin\AppData\Local\Temp\b200c59bc7f54a014553ca0820eedeb97c58319889029257d6a01e680300752a.exe"
    1⤵
      PID:112

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/112-1-0x0000000000890000-0x0000000000990000-memory.dmp

      Filesize

      1024KB

    • memory/112-3-0x0000000000400000-0x0000000000448000-memory.dmp

      Filesize

      288KB

    • memory/112-2-0x0000000000400000-0x000000000040B000-memory.dmp

      Filesize

      44KB