Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8867cd5abb472f44549dfd27d1c2fb233e955704585f4098d7fdaa57a922aded

  • Size

    264KB

  • Sample

    220912-xvp8kahfhp

  • MD5

    090b88bbdc9449df3c8031b5dbab545c

  • SHA1

    4af9e81ae23e30deaefdbf202c03db730a389efd

  • SHA256

    8867cd5abb472f44549dfd27d1c2fb233e955704585f4098d7fdaa57a922aded

  • SHA512

    d82eccdc705176de1842d00128b5d0570ff486821326971c5e4ed95c30320e878836a75eb98112a3565d929b55bb958409416c81df1ed8b21b55590012170e4a

  • SSDEEP

    6144:V3XmwgOEzkAVI3yyEbFYlTmM0xFtxlYt6TnafLWJV:92/LzBC3yyEpYlTmM0ZxlegyW

Malware Config

Targets

    • Target

      8867cd5abb472f44549dfd27d1c2fb233e955704585f4098d7fdaa57a922aded

    • Size

      264KB

    • MD5

      090b88bbdc9449df3c8031b5dbab545c

    • SHA1

      4af9e81ae23e30deaefdbf202c03db730a389efd

    • SHA256

      8867cd5abb472f44549dfd27d1c2fb233e955704585f4098d7fdaa57a922aded

    • SHA512

      d82eccdc705176de1842d00128b5d0570ff486821326971c5e4ed95c30320e878836a75eb98112a3565d929b55bb958409416c81df1ed8b21b55590012170e4a

    • SSDEEP

      6144:V3XmwgOEzkAVI3yyEbFYlTmM0xFtxlYt6TnafLWJV:92/LzBC3yyEpYlTmM0ZxlegyW

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks