Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e9e1a1c7d05b579813e1c321d03a167c7cb28a983daa5a0a5e957db99be3e2eb

  • Size

    205KB

  • Sample

    220909-edxxzaddhn

  • MD5

    3e5d5115672b97a1041916160e47a06a

  • SHA1

    8a544fea8ceca9add6f8122b7723010016e42829

  • SHA256

    e9e1a1c7d05b579813e1c321d03a167c7cb28a983daa5a0a5e957db99be3e2eb

  • SHA512

    2543a26ba1fb5254a773ef321d3d23d5904a391ce103db7ebf8a93b31eb97730d3955793fc087c36258efd0d0e7c8f29f302067b521f8f7500de4ef75d06e9a1

  • SSDEEP

    3072:yHuDEA7+Oh57tuJc56gYRoMdXkKTcrhqPb/tDSH+wfD3vdEppe0:fDjZltp6gYRjyKTcGtSzDfCH

Malware Config

Targets

    • Target

      e9e1a1c7d05b579813e1c321d03a167c7cb28a983daa5a0a5e957db99be3e2eb

    • Size

      205KB

    • MD5

      3e5d5115672b97a1041916160e47a06a

    • SHA1

      8a544fea8ceca9add6f8122b7723010016e42829

    • SHA256

      e9e1a1c7d05b579813e1c321d03a167c7cb28a983daa5a0a5e957db99be3e2eb

    • SHA512

      2543a26ba1fb5254a773ef321d3d23d5904a391ce103db7ebf8a93b31eb97730d3955793fc087c36258efd0d0e7c8f29f302067b521f8f7500de4ef75d06e9a1

    • SSDEEP

      3072:yHuDEA7+Oh57tuJc56gYRoMdXkKTcrhqPb/tDSH+wfD3vdEppe0:fDjZltp6gYRjyKTcGtSzDfCH

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks