Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0be73f991e0ac54df68f61597038ccd931a06603211dd2dbc665fb62a239a431

  • Size

    206KB

  • Sample

    220909-b22paagce6

  • MD5

    1ae24c73d964d9c3b1e98ebcce80187f

  • SHA1

    ace5b854c401eb86ce72915af9353455dcf0ac1f

  • SHA256

    0be73f991e0ac54df68f61597038ccd931a06603211dd2dbc665fb62a239a431

  • SHA512

    d55afcb7ca251c8d9009e6d93e0144646d18842769384f82f74a8e52679a043a49828e1afdbebee572cf8f1d428f17ef824e5a0a1c338dab339e24bd55f5e0a8

  • SSDEEP

    3072:M86QifjOahZzGwSJcRDP0wnOo87zEZVsLok1aX2CGKK3jlI/V5xp:i991GwBnOo87z8ask1IlGKdN

Malware Config

Targets

    • Target

      0be73f991e0ac54df68f61597038ccd931a06603211dd2dbc665fb62a239a431

    • Size

      206KB

    • MD5

      1ae24c73d964d9c3b1e98ebcce80187f

    • SHA1

      ace5b854c401eb86ce72915af9353455dcf0ac1f

    • SHA256

      0be73f991e0ac54df68f61597038ccd931a06603211dd2dbc665fb62a239a431

    • SHA512

      d55afcb7ca251c8d9009e6d93e0144646d18842769384f82f74a8e52679a043a49828e1afdbebee572cf8f1d428f17ef824e5a0a1c338dab339e24bd55f5e0a8

    • SSDEEP

      3072:M86QifjOahZzGwSJcRDP0wnOo87zEZVsLok1aX2CGKK3jlI/V5xp:i991GwBnOo87z8ask1IlGKdN

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks