Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

d91dc1d99d...64.exe

windows7-x64

10

d91dc1d99d...64.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/11/2024, 02:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d91dc1d99dc2e79cc4fac2ab1a9a3d69626cb566b619998206154bf0d128bf64.exe

  • Size

    252KB

  • MD5

    c0763d4218f74bf7188d9af119288c4b

  • SHA1

    11ab36565dbd4a336702fc7e19375bf279f6418f

  • SHA256

    d91dc1d99dc2e79cc4fac2ab1a9a3d69626cb566b619998206154bf0d128bf64

  • SHA512

    be31213bf28b037448447e9c66d5c23eac32cb528bdb95be0ff4f7d4587ca537d86ecd3a27ac789648f51fac9a42c5772db5b0c1f08bc3a85e55b7755f3283ef

  • SSDEEP

    3072:FogH+TLIFDaxRH32/LIU1AYYKhoYBZYZf1ZhtsfpEUBvSb95Ptb1XlhHo:CLLDxRHyIU1gIo7Zf8pElvXL

Score
10/10
smokeloader2023backdoortrojan

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\d91dc1d99dc2e79cc4fac2ab1a9a3d69626cb566b619998206154bf0d128bf64.exe
    "C:\Users\Admin\AppData\Local\Temp\d91dc1d99dc2e79cc4fac2ab1a9a3d69626cb566b619998206154bf0d128bf64.exe"
    1⤵
      PID:3044

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3044-1-0x0000000002D00000-0x0000000002E00000-memory.dmp

      Filesize

      1024KB

      Download

    • memory/3044-2-0x0000000000400000-0x0000000000409000-memory.dmp

      Filesize

      36KB

      Download

    • memory/3044-3-0x0000000000400000-0x0000000002B97000-memory.dmp

      Filesize

      39.6MB

      Download

    • memory/3044-4-0x0000000000400000-0x0000000002B97000-memory.dmp

      Filesize

      39.6MB

      Download