Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6fa94d6ee7a24a1dea25476fd585d371fb7fa39197aa8e48ef8cd933bb5ea08b

  • Size

    249KB

  • Sample

    220913-smnmjsbfhj

  • MD5

    931c666a7bb9190f5dec8bed370e63d4

  • SHA1

    bf4a2198683d2472d7f71120435ff4ba2c344f6b

  • SHA256

    6fa94d6ee7a24a1dea25476fd585d371fb7fa39197aa8e48ef8cd933bb5ea08b

  • SHA512

    14d3347e87884efbd7abaed9230e915c9baa1945165c2a5a57b9559b3e00baed954d6aaf3428f84ddc4f6fbbc094241cd87f914eb9727dbf7ca87d1fae754be4

  • SSDEEP

    6144:R9zWRANS5rKSxDtCz78sfDQGcWM2QDn8l:TqAGrKSxDtUNDQCM

Malware Config

Targets

    • Target

      6fa94d6ee7a24a1dea25476fd585d371fb7fa39197aa8e48ef8cd933bb5ea08b

    • Size

      249KB

    • MD5

      931c666a7bb9190f5dec8bed370e63d4

    • SHA1

      bf4a2198683d2472d7f71120435ff4ba2c344f6b

    • SHA256

      6fa94d6ee7a24a1dea25476fd585d371fb7fa39197aa8e48ef8cd933bb5ea08b

    • SHA512

      14d3347e87884efbd7abaed9230e915c9baa1945165c2a5a57b9559b3e00baed954d6aaf3428f84ddc4f6fbbc094241cd87f914eb9727dbf7ca87d1fae754be4

    • SSDEEP

      6144:R9zWRANS5rKSxDtCz78sfDQGcWM2QDn8l:TqAGrKSxDtUNDQCM

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks