Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c373e754e77f74df9744f0e11b661cff57e509b4d63ffe1aaa2261ad5547eade

  • Size

    261KB

  • Sample

    220906-tq5wnsdabr

  • MD5

    ba4bce11e71424199bbb5057544c3461

  • SHA1

    d141a008e5c045f37f9022da4c980f59bf347eff

  • SHA256

    c373e754e77f74df9744f0e11b661cff57e509b4d63ffe1aaa2261ad5547eade

  • SHA512

    307162252b181b33aa0835d89323be3aa87cad750f6d0d9d534d8238577c6f80571bf92cf94ceb10aba6a1afe020beba8caabc57a58d8485d38a36ff6a6443ec

  • SSDEEP

    6144:2gwDrAmDXbM+lbbjOKSMcY4jyp2OoZJNjXsN9f/FqRIJ:2ggAm7gabbjOKSMchyIOohWRFqy

Malware Config

Targets

    • Target

      c373e754e77f74df9744f0e11b661cff57e509b4d63ffe1aaa2261ad5547eade

    • Size

      261KB

    • MD5

      ba4bce11e71424199bbb5057544c3461

    • SHA1

      d141a008e5c045f37f9022da4c980f59bf347eff

    • SHA256

      c373e754e77f74df9744f0e11b661cff57e509b4d63ffe1aaa2261ad5547eade

    • SHA512

      307162252b181b33aa0835d89323be3aa87cad750f6d0d9d534d8238577c6f80571bf92cf94ceb10aba6a1afe020beba8caabc57a58d8485d38a36ff6a6443ec

    • SSDEEP

      6144:2gwDrAmDXbM+lbbjOKSMcY4jyp2OoZJNjXsN9f/FqRIJ:2ggAm7gabbjOKSMchyIOohWRFqy

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks